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In this Issue 

The software development process is being subjected to intense scrutiny 
and a lot of fine tuning these days. In HP's Corporate Engineering Depart- 
ment, the Software Engineering Laboratory leads companywide efforts in 
software metrics, tools, productivity, and environments, and has been holding 
an annual Software Productivity Conference. The papers presented at these 
conferences are full of creative engineering and good ideas. Taken together, 
they show that HP's software laboratories are investing an impressive portion 
of their resources in efforts to improve every aspect of the process of software 
development, an indication that the importance of software is being recog- 
nized as never before. 

The original versions of the papers on pages 4 through 36 of this issue were presented at the 
1 985 HP Software Productivity Conference, and the subject of the article on page 37 was presented 
in a paper at the 1984 conference. Most of the papers deal with internal design, testing, and 
measurement tools and methods. On page 4. Marty Caganof HP Laboratories presents a summary 
of HP's artificial intelligence workstation research efforts, which have so far produced one product, 
a Common Lisp development environment for the HP 9000 Series 300 workstation family. This 
product, along with some experimental software and the hardware to run it all, is being given, in 
a major HP grants program described on page 7, to several universities to aid their research in 
artificial intelligence and symbolic programming. The cover photo shows the HP Flight Planner/ 
Flight Simulator, an application developed using HP Al workstation technology. The Flight Planner' 
Flight Simulator is described on page 13. 

On page 43, you'll find a short article about the design of a new piug-in ROM package for the 
HP-718 Handheld Computer. The package makes it easier to program the HP-71B to control the 
HP 3421 A Data Acquisition/ Control Unit for low-cost, battery-powered, portable data acquisition 
and control applications. 



-R.P. Dolan 



What's Ahead 

Scheduled for March are six articles on the design details of the HP 54100A/D and HP 541 10D 
Digitizing Oscilloscopes. These general-purpose osciltoscopes are especially useful for digitial 
design and high-speed data communications applications. Also in the issue is an article on a 
software package designed to teach the fundamentals of digital microwave radio. 



The HP Journal encourages technical discussion of the topics orasenifld in recenlaniclesand will publish letters enpecfed to oeol mteresl To our readers Letters must be brief and are subfocl 
to editing Letters should be addressed to Editor Howtea-Pfldiard Journal, 3000 Hanovet Srieel Palo Alio CA 94304 US A 
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An Introduction to Hewlett-Packard's Al 
Workstation Technology 

Here is an overview of HP artificial inteiiigence workstation 
research efforts and their relationship to HP's first Al 
product, a Common Lisp Development Environment. 

by Martin R. Cagan 



HEWLETT-PACKARD RECENTLY ENTERED the 
artificial intelligence (Al) arena with the announce- 
ment of its first symbolic programming product, the 
Hewlett-Packard Development Environment for Common 
Lisp. The technology underlying HP's initial product entry 
is the result of more than five years of research and develop- 
ment on what has evolved into the Hewlett-Packard AJ 
Workstation. This article provides an overview of the Al 
Workstation technology. 

The Hewlett-Packard Al Workstation represents the 
aggregate of the major symbolic programming software de- 
velopment efforts at Hewlett-Packard. [Previously, this re- 
search effort was internally referred to as the Prism pro- 
gram.) The term Al Workstation refers to the company-wide 
internal research and development program in Al, rather 
than to a particular product. In addition to the many HP 
divisions whose efforts have contributed key system com- 
ponents, many important concepts are based on research 
from the Massachusetts Institute of Technology (MIT), the 
University of California at Berkeley, and the Xerox Palo 
Alto Research Center (PARC). The University of Utah, in 
particular, has contributed significantly. Currently, HP's 
Al Workstation is actively used by well over two hundred 
people at various HP divisions, as well as by students and 
professors at major research universities across the United 
States. HP recently announced a $50 million grant of hard- 
ware and software which will provide Hewlett-Packard Al 
Workstations to selected major computer science univer- 
sities (see box. page 7], 

The Al Workstation technology is both portable and scal- 
able, and can run on a variety of processors and operating 
systems, including the new HP 9000 Series 300 workstation 
family under the HP-UX operating system. The first and 
primary product that is an offspring of the Al Workstation 
technology is the Hewlett-Packard Development Environ- 
ment for Common Lisp, announced at the 1985 Interna- 
tional Joint Conference on Artificial Intelligence. Much of 
the technology described in this article is experimental and 
the reader should not assume the software discussed here 
can be purchased. Those components that are part of the 
Hewlett-Packard Development Environment for Common 
Lisp or other products will be noted. 

There has been a great deal written in the press recently 
regarding symbolic programming technology and Al. The 
transition from numeric programming to symbolic pro- 
gramming is analogous to the "algebraization" of mathemat- 
ics that occurred a century ago. The axiomatic, abstract 



algebraic viewpoint that was needed to simplify and clarify 
so many puzzles then is likened to the need for symbolic 
programming techniques to help solve today's difficult 
computational problems. Al applications such as natural 
language understanding, theorem proving, and artificial 
vision all rely on symbolic programming techniques for 
their flexibility and power in manipulating symbols, ma- 
nipulating relationships between symbols, and representing 
large and complex data structures. The Al Workstation is 
a software system designed to solve problems using sym- 
bolic programming techniques. This article explores the 
Al Workstation by describing it from four perspectives; the 
market, the technology, the environment, and the applica- 
tions. 

The Market 

There are many opinions concerning the future direct ion 
of the software market, but most agree that software is 
steadily becoming more complicated, powerful, and intel- 
ligent. Hewlett-Packard's Al Workstation provides the tech- 
nology for developing and executing intelligent and sophis- 
ticated applications. 

At Hewlett-Packard, Al techniques are viewed as an en- 
abling technology. The Al Workstation provides tools and 
facilities that enable the programmer to create applications 
that were previously considered infeasible. These applica- 
tions include expert systems, artificial vision, natural lan- 
guage interfaces, robotics, and voice recognition systems. 
Development and execution of these Al applications often 
require capabilities not available or feasible in conven- 
tional computer systems. For example, consider an expert 
tax advisor application. Such a system would need to em- 
body the relevant knowledge and reasoning strategies of 
human tax advisors. Al-based techniques provide the 
necessary' mechanisms for this knowledge representation 
and reasoning, 

The Al Workstation's use need not be restricted to prob- 
lems requiring the direct employment of Al technology, 
however. It has also been designed to foster improvements 
in the conventional software development market. For 
example, a typical tax accounting application may not need 
Al techniques for its implementation, yet can be im- 
plemented and maintained more productively by employ- 
ing Al-based software development tools, such as tools that 
intelligently help locate and diagnose errors in the program 
code. 
The Al Workstation is used by the software developer 
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to develop applications, and by end users to run Al-based 
applications. One of the AI Workstation's primary contribu- 
tions to the AI market is that it provides both a development 
environment and an execution environment for AI applica- 
tions, and it provides both on low-cost, conventional 
hardware such as the HP 9000 Series 300, 

The software developer sees the AI Workstation as an 
environment tailored for the rapid development of software 
systems. The languages provided are geared for high pro- 
ductivity. The environment allows multiple programs, 
written in multiple languages, to be created, tested, and 
documented concurrently. Interpreters and compilers 
allow systems to be developed incrementally and interac- 
tively. The software developer can use the AI Workstation 
for the development of knowledge-based systems, or sim- 
ply as a more productive means of generating conventional 
software written in conventional languages. In general, 
then, two reasons motivate the use of the AI Workstation 
as a software development machine. Either the AI Worksta- 
tion technology is necessary to develop a particular AI 
application, or the user has a need to develop conventional 
applications in conventional languages more productively. 

The end user of AI Workstation-based applications views 
the AI Workstation as an execution environment for appli- 
cations that are highly interactive, intelligent, and cus- 
tomizable. The end user benefits from the total system. 
with high-resolution graphics, color displays, local area 
networks, multiple windows, and special-purpose input 
devices, The AI Workstation is modular and scalable so 
that a particular application can run with a minimum of 
resources and therefore keep the delivery vehicle's cost as 
low as possible. This is a major feature for many AI Work- 
station users who wish to both develop and distribute ap- 
plications using the AI Workstation. To these users, provid- 
ing a low-cost delivery vehicle is a major concern. 



The AI Workstation also supports the notion of a server. 
A server is a system that is located on a network, dedicated 
to running a particular application. Other systems on the 
network, possibly even other servers, can send requests to 
the server to perform a function. The server performs the 
task and when appropriate, responds to the send- 
Workstation-based servers and workstations make it easy 
for applications to create and send programs back and forth. 
A machine receiving a program is able to execute the pro- 
gram within the context of its local environment. Networks 
of servers running AI Workstation-based applications may 
prove to be a cost-effective solution for many users. 

There has already been a great deal written about the 
large potential for productivity and quality improvements 
in software development, and given the rising cost of soft- 
ware development, there is a high demand for such im- 
provements. Traditionally, AI researchers have demanded 
more productive and powerful software engineering tools 
from their environments. This was necessary to manage 
the scope and complexity of their software systems. Now 
that powerful, personal workstations are cost-effective, a 
wide range of software engineering tools, previously feas- 
ible only on expensive mainframes or special-purpose 
hardware, are now available for the design, development, 
testing, and maintenance of software systems. 

The Technology 

The evolution of the technology underlying the AI Work- 
station began with a joint development effort by HP Labora- 
tories and I he University of Utah. 1 The goal of this effort 
was to creates portable, high-performance implementation 
of a modern l.isp system so that programmers could enjoy 
efficiency and portability comparable to C and Fortran, 
along with the interactive and incremental program de- 
velopment and debugging environment of Lisp. Previously. 
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to enjoy high performance from Lisp, special-purpose, ex- 
pensive hardware was required, A major contribution of 
the resulting underlying Lisp technology is that it is effi- 
cient even on conventional, low-cost hardware. 
Lisp. Lisp is the dominant programming language for arti- 
ficial intelligence research in the United States- But why- 
Lisp? From a historical standpoint. Lisp is second in endur- 
ance and longevity only to Fortran. The modern Lisp sys- 
tems, such as Hewlett-Packard's implementation of Com- 
mon Lisp,'' feature less cryptic alternatives to the basic Lisp 
commands, as well as many of the control structures and 
data types that have proven useful in conventional lan- 
guages,* Although Lisp has evolved from its original form, 
it is for the most part as it was designed in 1958 by John 
McCarthy. Unlike Fortran, however, Lisp is attracting new 
converts daily, and is more popular today than it has ever 
been in its 28-year history. Unfortunately, many program- 
mers in the industry today have not yet had the opportunity 
to work with Lisp as a production language, thus making 
it difficult to compare Lisp with C, Pascal, Fortran, or 
COBOL. A discussion of the primary features of Lisp fol- 
lows, so that programmers of conventional languages can 
get an idea of what it is like to develop in a Lisp environ- 
ment. 

■ Lisp supports incremental development. In conventional 
languages, when trying to build a program incrementally, 
the programmer must perform a number of time-consum- 
ing tasks, such as writing procedure stubs, including 
declarations, and constructing or simulating data. Each 
iteration requires an edit/compile/link/test cycle. In con- 
trast, the Lisp programmer can simply write a function 
in terms of other functions that may or may not have 
been written yet and build either in a top-down fashion 
or in a bottom-up fashion, creating and testing continu- 
ously. The function can be executed as soon as it has 
been typed in. 

■ Lisp programs don't need declarations. Unlike C, Pascal, 
COBOL and most other conventional languages in which 
the programmer must specify the data structures and 
variables before using them. Lisp allocates the right 
amount of storage, when it is needed, automatically. This 
allows the programmer to develop functions truly "on 
the fly." without maintaining and propagating declara- 
tions throughout the program. Once a program has 
stabilized, the programmer can add declarations to im- 
prove the efficiency. 

■ Lisp provides excellent debugging. The Lisp environ- 
ment supports an attitude towards error diagnosis that 
is quite different from that induced by conventional pro- 
gramming languages. When a bug is encountered during 
development of a Lisp program, the Lisp environment 
invites the programmer to explore the environment in 
which the exception was detected. The full power of 
Lisp itself is available to the programmer when debug- 
ging. Data structures can be analyzed and functions re- 
defined, in fact, the programmer can even construct new 
Lisp functions on the fly to help diagnose the problem. 
In Lisp, a program error is less an error and more a break- 
point where the programmer can examine the system. 

•Common Usp wrth the support of the U S Department ot Defense has emerged as the 
'ndustry-standard Lisp aiasect 



■ Lisp manages memory automatically for the program- 
mer. Memory management and reclamation are taken 
care of automatically in a Lisp environment. With con- 
ventional languages, memory management often ac- 
counts for a significant portion of the programmer's code. 
In Lisp systems, however. Lisp itself tracks memory use 
and reclaims unneeded storage automatically. This ser- 
vice allows the programmer to concentrate on the prob- 
lem at hand, without having to manage the resources 
needed to implement the problem's solution. 

■ Lisp programs can easily create or manipulate other Lisp 
programs. Lisp is unique among major languages in that 
Lisp programs and data are represented with the same 
data structure, The benefits that result from this charac- 
teristic: are many and have proven to be among the major 
contributions to the power of Lisp. This characteristic, 
for example, makes it is easy to write Lisp programs that 
create other Lisp programs, as well as to write Lisp pro- 
grams that can understand other Lisp programs. Pro- 
grams can be manipulated as data, and can be im- 
mediately executed or transferred to another Lisp 
machine for execution.* 

■ Lisp programs can run with a mix of compiled and inter- 
preted code. The AI Workstation provides both a Lisp 
compiler and a Lisp interpreter. For development, the 
interpreter allows enhanced debugging and quick incre- 
mental design. Once a program is ready to be put into 
use, it can be compiled to increase its performance and 
reduce its code size. During development, however, the 
programmer often needs to run with a mix of compiled 
and interpreted code. The Al Workstation's Lisp has the 
feature of allowing an arbitrary combination of compiled 
and interpreted code. It is not unusual for a programmer 
to redefine compiled functions at run time to examine 
and explore the behavior of the application, 

■ Lisp is comfortable with symbols. In conventional lan- 
goages, arbitrary symbols are treated as unstructured 
data. The programmer coerces them into a character array 
and analyzes the array byte by byte until some sense can 
be made out of them in terms of the data types understood 
by the language. Lisp, however, is a symbolic program- 
ming language. Arbitrary symbols are first-class objects, 
and can be manipulated as symbols rather than by trying 
to treat them as elements in an array- The programmer, 
in turn, can give symbols properties and manipulate re- 
lationships between symbols. 

■ Lisp is easy to extend. Functions defined by the program- 
mer are treated in the same way as system-defined func- 
tions When implementing complex systems, it is often 
useful to develop a specific vocabulary of functions for 
conversing in a particular problem domain. With Lisp, 
these specific, problem-oriented languages can be de- 
veloped easily and quickly. 

Because of its longevity and its many useful features, the 
reader may wonder why conventional programmers have 
not been using Lisp for years. There are three major reasons 
for this. First, until very recently, the Lisp environments 
described above were available only on large and expensive 
machines, and even on these machines, Lisp was using 
more than its share of resources. Only now, with the avail- 

""'One person s data is another person s program ' — Guy i_ Steee Jr 
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HP's University AI Program 



• a most of the AI technologies, was developed 
John McCarthy was at the Massachusetts institute of 
Tec - ■ Marvin Minsky when he developed the firs' 

version in 1958 Today, the un 'ne wono a 

primary source of basic research >n AI 

To help universities m their AI research programs. Hewlett- 
Packard has implemented the .argest single grants prog/i 
its history In early 1985 we announced a program to gra 
to S5 ' equipment to selected universities in the United 

States. In October, after receiving over 50 proposals, we selected 
15 schools. 

Each university will receive 20 to 60 engineering worksta 1 
one year of support, and experimental AI software from HP 
Laboratories 

The schools we have selected are Brown University, the Califor- 
nia Institute of Technology, Carnegie-Mellon University. Columbia 
University, Cornell University, the Massachusetts Institute of 
Technology, Stanford University, the University of California at 
Berkeley the University of California at Los Angeles, the Univer- 
sity of Colorado at Boulder, the University of Pennsylvania, the 
University of Southern California, the University of Texas at Austin, 
and the University of Utah 

The equipment will be used by faculty and graduate students 
to conduct research, and in classrooms 'or instruction. 

By providing the latest equipment and software to these 
schools, we hope to see great advances in the state of the art 
in AI In addition, we expect the universities to be able to tram 
more AI practitioners, and train them better on the same caliber 
of equipment they will use on the job. 

AI Research Configuration 

The workstations granted to universities are fully configured to 
support advanced research They include. 

■ HP 9000 Model 320 CPU using the Motorola 68020 processor 
wiin seven megabytes of RAM 

■ High-resolution color monitor 

■ Mouse 

■ Expander box 

• 1 10 megabytes of hard disc storage (2 HP 7945 disc drives) 

■ Cartridge tape drive for system backup (HP 9144A) 

■ Local area network interface and software 

■ HP-UX operating system with windows and graphics utilities 



■ HP Laseriel Plus Printer (1 for each 10 workstations on the net) 

P 7550A) (i for each 10 workstations on the 

■ Five additional disc drives (5 HP 7945s for 20 workstations) 
Some researchers plan to use the AI Wo'* 

research They will receive the above configurations with the 
addition of the follow 

■ Graphics display station with eight planes of color and a sec- 
ond high-resolution color display 

■ Graphics accelerator 

AI Research at MET 

Three years ago Hewlett-Packard made a grant of five HP 
9000 Model 236 Pascal workstations to Professor Gerald 
Sussman at the Massachusetts Institute of Technology Using 
these systems. Prof Sussman developed his own dialect of Lisp 
called Scheme, which is oriented to the leaching of programming 

Today, students taking MIT's 6 001 class, the first course in 
the computer science curriculum, learn Scheme instead of For- 
tran or Pascal or C. With his colleague. Harold Abeison. Prof. 
Sussman has written a book. The Structure and Interpretation of 
Computer Programs That book is now used to teach program- 
ming skills at Hewlett-Packard and at campuses across the U.S. A 

With his new grant, Prof Sussman plans to take advantage of 
the skills the students learned in 6.001 to improve ihe curriculum 
for Signals and Systems, a required course for ail electrical en- 
gineering majors He proposes to pul sophisticated simulations 
of circuits at the students' disposal. With their programming skills 
they can explore those simulations, develop their own experi- 
ments, and learn by doing. "For the first time." says Prof Sussman, 
"we can incorporate into the curriculum explicit theories of how 
skilled engineers analyze and design technological artifacts Our 
challenge now is to learn how to describe, explain, and teach 
the process of engineering." 

Prof. Sussman's work in computer-aided-instruction is based 
on theories developed by Marvin Minsky and Seymour Papert 
His research may lead us to new models of learning that will 
allow students lo learn and retain more material more rapidly 

Seth G. Fearey 

AI University Grants Program Manager 

Hewlett-Packard Laboratories 



ability of inexpensive, high-performance workstations and 
improved compiler technology, has Lisp become a cost-ef- 
fective solution for conventional software development. 
Second, production languages were previously judged 
largely on the efficiency of compiled code. Now that the 
constrained resource is the software development cost 
rather than the delivery machine hardware, languages are 
being judged based on a different set of values. 1 

Third, while the features of Lisp described above are 
valuable, they do not come without a cost, Most Lisp sys- 
tems remain ill-suited for such problems as real-time and 
security-sensitive applications Reducing these costs is a 
major research topic at many university and industrial re- 
search laboratories. At HP, we have acknowledged the fact 
that different languages are optimized to solve different 
problems, and we have provided the ability for the Lisp 
environment to access arbitrary C, Pascal, and Fortran 
routines. This has important ramifications for HP and its 



customers. It is not necessary to discard existing code and 
data libraries to enjoy the benefits of Lisp. For example, 
in intelligent front end that accesses Fortran code libraries 
for instrument control can be written in Lisp. (The exten- 
sions to Common Lisp for foreign function calling are part 
of ihe Hewlett-Packard Development Environment for Com- 
mon Lisp product.) AI Workstation-based applications are 
often blends of Lisp and conventional language compo- 
nents. 

Object-Oriented Programming. The AI Workstation pro- 
vides two higher-level languages, themselves implemented 
in Lisp, which support alternative paradigms for software 
development. The first of these language extensions sup- 
ports object-oriented programming while ihe second sup- 
ports rule-based programming. 

HP provides a Lisp-based object-oriented programming 

language IIS xlensiuus to Common Lis}) !m nli|fi.t 

oriented programming are part of the Hewlett-Packard De- 
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velopment Environment for Common Lisp product.) Most 
of the AI Workstation's environment itself is written using 
this technology. Object-oriented programming is very 
much on the rise throughout the entire industry, and for 
good reason. Object-oriented programming brings to the 
programmer a productive and powerful paradigm for soft- 
ware development. It is a paradigm that addresses head-on 
the serious problems of code reusability and software 
maintainability by employing powerful techniques such as 
inheritance, data abstraction, encapsulation, and generic 
operations. 4 

Unlike most conventional languages, object-oriented 
Lisp is a language designed to support a particular program- 
ming methodology. The methodology, with support from 
the language, provides explicit facilities for code reusabil- 
ity, software maintainability, program extensibility, and 
rapid development. 

The essential idea in object-oriented programming is to 
represent data by a collection of objecls and to manipulate 
data by performing operations on those objects. Each object 
defines the operations that it can perform. 3 

The first facility i will describe is the notion of dala 
abstraction. Using the object-oriented style of program- 
ming, each object is regarded as an abstract entity, or "black 
box," whose behavior is strictly determined by the opera- 
tions that can be performed on it. In other words, the only 
way an object is accessed or modified is by performing the 
operations explicitly defined on that object. In particular, 
the internal data structure used to represent the object is 
private, and is directly accessed only by the operations 
defined on the object. Operations are invoked by sending 
messages to the object. 

One advantage of the object-oriented slyle of program- 
ming is that it encapsulates in the implementation of an 
object the knowledge of how the object is represented. The 
behavior of an object is determined by its external interface, 
which is the set of operations defined on the object. If the 
designer changes the representation of an object, and the 
externally visible behavior of the operations is unchanged, 
then no source code that uses the object need be changed. 

For example, suppose we wish to define a type dog. Using 



the object-oriented extensions to Common Lisp, our defini- 
tion might be: 

(define-type dog 
(:var name) 
(:varage) 
(:var owner} 
) 

This says that we are defining a new type of object dog, 
with an internal representation consisting of a name, an age, 
and an owner. For example: 

(self fido (make-instance 'dog :name "Fido")] 

This sets the variable fido to an instance of the type dog, 
with the name "Fido." [f we wished, we could create one 
hundred instances of the type dog, each unique, whether 
or not they have the same name (just as there are many 
dogs, with more than one named "Fido"). Note that exter- 
nally, nothing knows of our internal representation of the 
type dog. We could be implementing the dog's internal 
representation any number of ways. 

We define operations on type dog by specifying the type 
and the operation, any parameters required by the opera- 
tion, and the implementation of the operation. For example, 
to define an operation that will let us change the dog's 
owner: 

(define-method (dog :give-new-owner) (new-owner) 
(setf owner new-owner) 

) 

Note that the implementation of the operation is the only 
place where the internals of type dog are referenced. The 
value of this encapsulation is that if we decide to change 
the implementation of type dog, then it is only the type 
definition and the operations defined on that type that 
need to be modified. 

We can access and manipulate the object by sending 
messages to it requesting it to perform specific operations. 
For example, to change Fido's owner to "Mandy": 

(-» fido :give- new- owner "Mandy") 
This statement reads, "Send the message to fido :give-new- 
owner 'Mandy'." Typically, we would define a number of 
operations for the type dog, such as sit, stay, come, and speak. 
These could then be invoked: 




Fig, 2. Flight simulator screens. Also see cover photo See text on page 73 for details 
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I'—, ftdo :sjt) 

{— » fkJo :stay) 

(— • fido :ccme) 

(— fido :speak> 

The second facility I will describe addresses the problem 
of code reusability. To a certain extent, the data abstraction 
facilities described abov. se the reuse of code med- 

ia that the implementation is encapsulated, and the 
external interface is well-defined. More directly applicable 
to this problem is the concept of inheritance. A new type 
of object can be defined that inherits from other types. All 
of the operations that manipulate the types and the data 
maintained by the types are inherited. A new type defini- 
tion can selectively override specific characteristics of the 
types that it inherits from. Thus, to define a new type that 
Is only slightly different from some existing type, one might 
simply have the new type inherit from the existing type 
and override those aspects that differ in the new type. For 
example, to define a new type of dog, golden-retriever; 

(detine-fype golden -retriever 
t: inherit- from dogj 

( :var n u m ber -of -tennis-bat I s -retrieved ) 
) 

This says that we want to define a new type golden-retriever, 
which inherits the data and operations from the type dog, 
In addition to the inherited attributes, we define golden-re- 
triever's to maintain the attribute number-of-tennis-balls-retrieved. 
Note I hat when using an object, one cannnl observe whether 
or not that object's type was defined using inheritance. 

We create an instance of the new type gofden -retriever 

[sett mac (make-instance 'golden -retriever :name "Mac")) 

For this new type of dag, we would have qui own im- 
plementation of the :speak operation, one ilia! produces a 
deeper bark than the Inherited version. We would also have 
some additional operations defined which are appropriate 
only to objects of the type golden -retriever. Fnr example, we 
have the additional operation fetch, which of course is an 
attribute of all retrievers, but not all dogs, as well a.s Ihe 
new operation :make-coffee (Mac is a very smart flog]. These 
could then be invoked: 

(-> mac speak) 

(— • mac :telcti) 

( • mac make-coffee lime 0700) 

Note iliai we could have made further use of Inheritance 

by first defining a type retriever that inherited from type dog. 
and then defining the new types golden-retriever and labrador- 
retriever whif h inherit from the type relriever. 

Another facility provided by object-oriented Lisp is the 
support of a powerful form of gene.ni operations known 
as polymorphism. When one performs an operation on an 
object, one is not concerned with what kind of object it is. 
but rather that an operation is defined on the object with 
the specified name and the intended behavior. This ability 
is lacking in languages like Pascal, where each procedure 
can accept only arguments of the exact types thai are de- 
i tared in the procedure header. As an example of the value 
of generic operations, suppose one day we attempt to re- 
place Man's Best Friend with a robot, presumably one 
domesticated to the same extent as a dog is. We could 
nn ] j1i tii i Til the new lype robot as follows: 



(defme-type robot 
(rvar namei 
I var model) 
it owner) 

To create an instance of type robot: 

roby i mate-tastanoe, robot :name Roby")) 

Suppose that we have an existing library oi applications 
that currently direct objects of the type goiden-retnever in 
various tasks. If we were to implement the same functional 
operations performed by objects of type goiden-retnever for 
lie robot, then all of our application code would work 
unchanged: 

(-» roby :sit) 

(-» roby :stay i 

(-* roby :come) 

(— roby :fetch) 

(— roby :speak) 

(— ■ roby .make -coffee :lime 0700) 

Wile that while the implementations of these operations 
differ, the functional specification and the external pro- 
tocol for dealing wi I h objects of type goiden-retnever and robot 
are defined to be the same, so our applications work un- 
changed, and we save on dog food, too. 

The facilities of object-oriented programming described 
here can go a long way towards improving program main- 
tainability, program extensibility, and code reusability. Ob- 
ject-oriented programming has been used to implement 
operating systems, window managers, market simulations, 
word processors, program editors, instrument controllers, 
and games, to name iusl a few of its applications. Its 
paradigm has proven productive, powerful, aiul easy I" 
learn and use. 

Rule-Based Programming. The second ol Ihe alternative 
paradigms provided in the Al Workstation is the Hewlett- 
I'ai kanl Representation Language [HP-RL), HP's experi- 
mental rule-based programming language,' 1 HP-RL is In- 
tended In support Ihe development of knowli ■■!■■ '■■■ 
software systems. Knowledge-based software systems, 
which include expert systems, are systems lliat search a 
knowledge hose of information and attempt to make deduc- 
tions anil draw conclusions using tin: rules of logical infer- 
ence. A knowledge fiase is a data base that embodies the 
knowledge and problem-solving strategies el human ex- 
perts. In an expeil system, there is rarely a procedural 
tpti in defined in advance for solving a problem. The 
system must search the knowledge base and make infer- 
ences by using the rules and strategies defined liv the de- 
veloper. Current knowledge-based nil ware systems In- 
clude applications such as medical consultation systems, 
integrated circuit diagnostic systems, tax advisnrs.and nat- 
ural language understanding systems. 

The key to knowledge-based systems lies in representing 
the vast amounts of knowledge in all organized and man- 
agi-.iiile structure. Without such organization, problems 
quickly become intractable. An intractable problem is one 
that cannot be solved in a reasonable amount of computa- 
tion time. HP-RL provides data structures and control struc- 
tures specifically for knowledge representation, knowledge 
organization, and reasoning about thai knowledge 

HP-RL allows knowledge to he represented as frames. A 
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frame is a data structure that groups together arbitrary 
amounts of information that are related semantically. 7 Typ- 
ically, a frame is used to store information specific to, or 
about, a particular entity. HP-RL allows knowledge to be 
organized into frames of related information. Like object- 
oriented programming, HP-RL provides the ability for 
frames to inherit information from other frames. For exam- 
ple, a frame that describes a specific entity such as a person, 
Jane, might inherit characteristics from related entities such 
as scientist and female. Therefore, the entity fane automat- 
ically inherits all of the attributes of females and scientists. 
Attributes specific to Jane can then be specified to differen- 
tiate Jane from other female scientists. 

Frames can be grouped into domains of knowledge. This 
sort of partitioning reduces problem complexity, and can 
also improve the efficiency of searches through I he knowl- 
edge base by helping the program avoid searching through 
irrelevant knowledge. Searching through the knowledge 
base is a sophisticated process performed by the HP-KL 
inference engine. The inference engine is the facility that 
scans the knowledge base trying to satisfy rules. Rules in 
HP-RL are frames composed of a set of premises and con- 
clusions, similar to an if-then construct in conventional 
languages. HP-RL provides both forward chaining and 
backward chaining rules. The inference engine applies for- 
ward chaining, or data driven, rules to infer conclusions 
given verified premises. The inference engine applies back- 
ward chaining, or goal driven, rules to find verifiable prem- 
ises, given a desired conclusion. 

As an example, consider a rule that says: If a dog is a golden 
retriever, then the dog likes tennis balls. If we define the rule to 
be a forward chaining rule, then when the inference engine 
is searching the knowledge base, if the current data sup- 
ports the assertion that the dog is a golden retriever, then 
we can infer that the dog likes tennis balls. If we define 



the rule to be a backward chaining rule, then when the 
inference engine is searching the knowledge base, if the 
desired goal is to find a dog that likes tennis balls, then 
the inference engine will check to see if the current data 
supports the assertion that the dog is a golden retriever. 

One of the primary differences between rule-based ap- 
proaches and conventional programming is that in rule- 
based programs. Ihe program's flow of control is not explicit 
in the program. The process of deciding what to do next 
is consciously separated from data organization and man- 
agement. The programmer can help direct searches by using 
heuristics. A heuristic is a rule that guides us in our navi- 
gation and search through a knowledge base, Managing 
searches through the knowledge base is a major research 
topic, since an intelligent and selective search of a knowl- 
edge base can make the difference between a usable system 
and an unusable system. Searching the knowledge base is 
where most of the computing resources are spent when 
using a knowledge-based system. To help with this prob- 
lem, HP-RL provides for the incorporation of heuristics 
about dealing with other heuristics, which can be used to 
govern the strategy of the program and therefore conduct 
searches more intelligently. 

HP-RL currently contains a number of experimental 
facilities which are being studied and tested to discover 
more effective mechanisms for performing the difficult task 
of capturing and using knowledge. 

The Environment 

One of the primary differences between programming 
with Lisp and programming with other languages is the 
environment provided for the programmer. The AI Work- 
station provides access to all data and execution via an 
integrated environment. The user environment is unusu- 
ally flexible and powerful. It contains a large and powerful 
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collection of text-manipulation functions and data struc- 
tures useful in constructing user interfaces, text and 
graphics editors, and browsers. The following sections 
explore these various components of the Al Workstation 
user environment. 

Editing. The AI Workstation environment contains a ver- 
sion of EMACS. an editor originally developed by Richard 
Stallman at MIT. Hewlett-Packard's object-oriented Lisp 
implementation of EMACS. like the original MTT EMACS. 
is a customizable, extensible, self -documenting, screen- 
oriented, display editor. 8 

Customizable means that users can mold the AI Worksta- 
tion EMACS in subtle ways to fit personal style or editing 
tasks. Many user-level commands exist to allow the user 
to change the environment's behavior dynamically. Cus- 
tomization is not limited to programmers; anyone can eas- 
ily customize the environment. 

Extensible means that the user can make major modifica- 
tions and extensions to the AI Workstation EMACS. New 
editing commands can be added or old ones changed to fit 
particular editing needs, while the user is editing. The user 
has a full library of text-manipulation functions at hand 
for the creation of new editing functions. This type of ex- 
tensibility makes EMACS editors more flexible than most 
other editors. Users are not constrained to living with the 
decisions made by the im piemen tors of the AI Workstation 
EMACS. If the user has a need for a new function, or a 
reason to modify the behavior of an existing function, then 
the user is able to make the modification quickly and easily. 

Self-documenting means that Ihe AI Workstation EMACS 
provides powerful interactive self-documentation facilities 
so thai the user can make effective and efficient use of the 
copious supply of features. 

Screen -oriented means that the user edits in two dimen- 
sions, so the page on the screen is like a page in a book, 
and the user has the ability to scroll forward or backward 
at will through the book. As the user edits the page, the 
screen is updated immediately to reflect the changes made. 
Just as many books on a desk can be open and in use at 
once, with the AI Workstation EMACS, many screens can 
be visible and ai.tivn simultaneously. In fact, one of HP's 
extensions to MIT's EMACS is Ihe ability not only to have 
multiple screens active on a single physical display, but 
also to have multiple screens on multiple physical displays. 
(The EMACS-based editing environment described here is 
pari of the Hewlett-Packard Development Environment for 
Common Lisp product.) 

Browsing. Another feature of the AI Workstation user en- 
vironment is a large library of tools known as browsers. 
Browsers are more than an integral component of the user 
environment; they are a metaphor for using the environ- 
ment, A browser is a simple tool for the convenient perusal 
and manipulation of a particular set of items.'' Experinirnt.il 
browsers in the AI Workstation environment include 
documentation browsers, file browsers, mail browsers, 
source code browsers, and application browsers. These 
browsers range from simple to very complex. Users can 
list all the mail messages sent by a particular person regard- 
ing ,1 particular subject, or can instantly retrieve the defini- 
tion of a particular Lisp function. The user can conduct 
automated searches of the documentation, or can browse 



and manipulate the contents of a complex data structure. 

Browsers provide a simple, intuitive, integrated interface 
that is useful for handling a wide range of problems. The 
environment provides a library of browser construction 
tools and functions to allow users to create their own brows- 
ers for their particular applications and needs. 
Programming. On the AI development machine, a large 
portion of the user environment is tuned to support the 
programming task, whir les activities such as pro- 

gram editing, debugging, testing, version and configuration 
management, and documentation. The A I Workstation sup- 
ports development in Lisp, C. Pascal, and Fortran. In addi- 
tion, a toolkit is provided to let users customize the envi- 
ronment for other languages. The AI Workstation provides 
an integrated and uniform model of multilingual software 
development. 

One of the major features of the AI Workstation user 
environment is the interface to the underlying Lisp system. 
Lisp programmers enjoy direct access to the Lisp compiler 
and interpreter without having to leave the environment. 
This means that a program can be edited, tested, debugged, 
and documented incrementally and interactively as the 
program is developed. The editing is assisted by an editor 
I hat understands the syntax of Lisp. Testing is assisted by 
Lisp interface commands, which pass the text from the 
program editor to the underlying Lisp system and return 
the results back to the environment. Debugging is assisted 
by an interactive debugger, function stepper, and data in- 
spector available directly from the environment. Program 
documentation is assisted by documentation tools de- 
signed for the programmer which generate much of the 
formatting details automatically. 

Using the foreign function calling facilities of the AI 
Workstation described earlier, non-Lisp programmers can 
also enjoy many of the benefits of interactive, incremental 
development. For example. I he: AI Workstation contains 
full two- and three-dimensional veclor and raslei gr ipliii 
operations. [The graphics facilities referred to arc provided 
on the HP 9000 Series 300 running under the HP-UX operat- 
ing system.] While these operations are C routines, all are 
directly accessible from the Lisp environment. Typically, 
C programmers must iterate through the edit/compile.'] ink 
test cycle as they develop a graphics application. In con- 
trast, using the Al Workstation. C programmers can step 
through the development of their graphics applications 
statement by statement, and enjoy immediate feedback sim- 
ply by observing the results on the screen. Once the pro- 
gram is functionally correct, the programmer can convert 
the statements into a forma! C program, and compile it 
with the standard C compiler. 

Managing. The AI Workstation user environment contains 
a variety of optional service applications to support the 
programmer in dealing w r ilh office and management func- 
tions. Experimental applications developed with this tech- 
nology include electronic mail, project management, docu- 
mentation preparation, slide editing, calendar, spreadsheet, 
iiiltiniiiili'in management, and lelejilirinn sen ices. Kadi of 
these applications, once the user chooses to include it, be- 
comes an integral part of the environment. Because all of 
these applications are written using the the Al Workstation 
environment facilities, they are customizable, extensible. 
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and accessible from anywhere in the environment. For exam- 
ple, the user can move from creating a slide to reading a mail 
message to testing Lisp code and back to creating the slide. 
Interfacing, The AI Workstation's user environment con- 
tains tools that greatly simplify the incorporation of new 
input and output devices such as tablets, touchscreens, or 
voice synthesizers. In addition to supporting standard 
keyboard and mouse input, experimental versions of the 
AI Workstation environment also support joystick, tablet, 
touchscreen, videodisc, voice input and output, and 
touchtone telephone input. The user environment also sup- 
ports many user interface models, and provides a library 
of environment functions to help users define their own 
user interface model. Existing user interface models in- 
clude pop-up menus, softkeys, English commands, and 
CONTROL-META key sequences. 

The AI Workstation does not impose a particular inter- 
face model on the user. Default interfaces exist, but the 
user is free to modify or add any user interface desired. 
Delivery applications written to run under the AI Worksta- 
tion environment can choose to use one or more of the 
supplied user interfaces, or the designer can define a new 
interface. 

The Applications 

This section examines some of the primary types of ap- 
plications the AI Workstation technology was designed to 
develop and run. Note that unless specified otherwise, 
these applications are experimental and not available for 
purchase. 

Diagnostic Systems. Diagnostic systems are good examples 
of expert system applications. Diagnostic systems retrieve 
as much data as possible from instruments and/or users, 
and attempt to determine the cause of the problem and/or 
the remedy. Diagnostic system applications include medi- 



cal diagnostic systems, instrument diagnostic systems, and 
intelligent computer-assisted instruction applications. 

At HP Laboratories, we are experimenting with an IC 
photolithography diagnosis system (see Fig. 1, page 5). This 
system, called the Photolithography Advisor, is an expert 
system used to diagnose failures in the negative photolithog- 
raphy resist stage of IC fabrication. 10 

Within Hewlett-Packard's computer support organiza- 
tion, a number of diagnostic expert systems are employed. 
The Schooner expert system diagnoses and corrects data 
communication problems between a terminal and an HP 
3000. The AIDA expert system provides an efficient tool 
for analyzing HP 3000 core dump files. The Interactive Periph- 
eral Troubleshooter system diagnoses disc drive failures. 
Instrument Control, A growing class of expert systems 
deals with the intelligent control, monitoring, and testing 
of instruments, as well as the interpretation of the data 
gathered by these instruments. Instrument control and in- 
terpretation applications include network analysis, factory 
floor monitoring, process control, and many robotics appli- 
cations. 

At Hewlett-Packard, one experimental application helps 
with the interpretation and classification of data collected 
by a mass spectrometer. Another application analyzes data 
from a patient monitoring system. Within die AI industry, 
a number of intelligent instrument and process control ap- 
plications are being developed, such as a system that 
monitors the operations of an oil refinery. 11 
Simulations. Many complex software systems fall into the 
category of simulations and modeling. Simulations play 
major roles in nearly every aspect of a business. The object- 
oriented programming facilities discussed earlier enable 
engineers to program simulations rapidly. Simulation ap- 
plications include econometric modeling, flight simula- 
tion, chemical interaction modeling, and circuit simula- 
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Fig. 4. Unified programming en- 
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tions. 

At HP Laboratories, for example, we have implemented 
VLSI logic simulators, which enable an engineer to design, 
debug, test, and evaluate circuit designs before incurring 
ictual manufacturing expense. 3 
- HP Flight Planner/Flight Simulator (see Fig. 2 and 
cover) is an application designed by HP Laboratories to 
illustrate a number of important features of the AI Worksta- 
tion technology: namely, that multilingual applications are 
desirable and simple to develop, that complex applications 
can be developed rapidly, that Lisp applications can be 
designed to run without the interruption of garbage collec- 
tions, and that Lisp applications can run on conventional 
hardware and operatingsystemsat very high performance. 

The Flight Planner module is a constraint-driven expert 
system for planning a flight. The system presents a detailed 
map of California stretching from San Francisco to Los 
Angeles. The pilot is asked for an originating airport, a 
final destination, and any intermediate stops desired. The 
pilot then is allowed to specify specific constraints, such 
as "Avoid oceans and mountain ranges," "Ensure no longer 
than 3 hours between stops," or "Plan a lunch stop in Santa 
Barbara." The system's knowledge base includes data on 
the airports, the terrain, and the specifications and capabil- 
ities of a Cessna 172 airplane. With the constraints 
specified, the Flight Planner attempts to find a viable flight 
plan that satisfies the constraints specified by the pilot, as 
well as the constraints implied by the limitations of the 
terrain and aircraft. 

Once a flight plan has been generated, the Flight Planner 
passes the flight plan off to the Flight Simulator module, 
which then flies the plan as specified. The flight plan 
specifies the destination, route, and cruise altitude for each 
leg of the flight. The flight simulator's autopilot module, 
using these directions as well as the specific airport and 



airplane data from the knowledge base, performs the take- 
off, flies the plane using ground-based navigational aids, 
and executes an instrument landing. In addition to flying 
predetermined flight plans via the autopilot, the Flight 
Simulator can be flown manually. The pilot uses an HP-HIL 
joystick, a 9-knob box, and a 32-button box as the controls. 

The Flight Planner is implemented using HP-RL. The 
Flight Simulator is implemented in Common Lisp and the 
object-oriented extensions to Common Lisp. The graphical 
transformations are performed by C routines accessed from 
Lisp, using the 3D graphics facilities of the HP-UX operat- 
ing system. The model of flight, the autopilot component, 
and the scene management are all written using the object- 
oriented extensions to Common Lisp. 

The Flight Simulator required two months for two people 
to develop, while the Flight Planner required a month for 
three people. 

Natural Language. With the computational and reasoning 
capabilities of systems such as the AI Workstation, compu- 
tational linguists are making headway into the difficult 
field of natural language understanding. At HP Laboratories. 
computational linguists have been using the AI Workstation 
to develop an experimental, domain independent, natural 
language understanding system (see Fig. 3). HP's natural 
language system employs a hierarchically structured lexi- 
con, a set of lexical rules to create derived lexical items, 
and a small set of context-free phrase structure rules as the 
data structures used in parsing English sentences and ques- 
tions. Interpretations of these sentences are the result of 
the meanings of the individual words together with the 
semantic rules that are associated with each of the dozen 
or so phrase structure rules. What the natural language 
system produces is a set of unambiguous application inde- 
pendent expressions in first-order logic, each expression 
corresponding to one possible interpretation of the original 
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Fig. 5. A screen from Micro- 
scope, a knowledge-based pro- 
gram analysis tool, showing a call 
graph monitoring program execu- 
tion, the source code ot the high- 
lighted module, evaluation history 
browser, and system resource 
monitors 
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sentence. In test applications, these expressions are trans- 
duced into either data base queries or messages to objects, 
making use of the domain -specific knowledge in each ap- 
plication to make precise those relations or pronoun bind- 
ings lhat were underspecified in the sentence itself. 12 ' 115,14 
Software Engineering. While environments such as the AI 
Workstation can significantly improve software productiv- 
ity, we are just beginning to reap the benefits of applying 
AI to the software development process itself. There are a 
number of projects throughout the industry working in this 
area. 

At HP Laboratories, we are working on intelligent pro- 
gramming environments that help the user assess the im- 
pact of potential modifications, determine which scenarios 
could have caused a particular bug, systematically test an 
application, coordinate development among teams of pro- 
grammers, and support multilingual development in a uni- 
form manner fsee Fig. 4). 15 Other significant software en- 
gineering applications include automatic programming, 
syntax-directed editors, automatic program testing, and in- 
telligent language-based help facilities. 

Applying AI to the software development process is a 
major research topic, lfi There is tremendous potential for 
improving the productivity of the programmer, the quality 
of the resulting code, and the ability to maintain and en- 
hance applications. One of HP's first projects of this type 
is MicraScope, a tool to help software engineers understand 
the structure and behavior of complex software systems 
(see Fig. 5). 

Conclusion 

We have discussed the AI Workstation from the point of 
view of the software market, the underlying technology, 
the user environment, and the Al-based applications. Hav- 
ing studied the A[ Workstation from each of these perspec- 
tives, we hope that the reader will assimilate this into a 
coherent and accurate view of the HP AI Workstation tech- 
nology. Over the coming years, HP engineers and our part- 
ner universities will be using the AI Workstation as a plat- 
form for exploring increasingly intelligent and powerful 
applications and technologies. 
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A Defect Tracking System for the UNIX 
Environment 

Created in response to a lack of effective defect tracking 
and analysis tools for software development, DTS is now 
used by 24 HP Divisions. 

by Steven R. Blair 



DTS IS A DISTRIBUTED defect tracking system that 
simplifies the process of reporting, collecting, and 
summarizing software defect data. It provides 
utilities for submitting, receiving, resolving, and archiving 
defect reports, and for generating detailed and summary 
report listings. 

DTS was designed to serve the defect tracking and met- 
rics collection needs of prerelease software development. 
It is available only in HP software development laboratories. 
It runs under versions of AT&T Bell Laboratories' UNIX '" 
operating system on networks of HP 9000 and Digital Equip- 
ment Corporation VAX'" computers. 

DTS was created in response to a lack of defect tracking 
and analysis tools in software development environments. 
For example, when a defect report was submitted, it often 
didn't describe the problem adequately or contain the infor- 
mation necessary to reproduce the problem. There was also 
no easy way to tell if I he defect report got to the person 
who had to research and fix the problem, and it was a 
difficult and tedious task for a manager to get an accurate 
count of defects for a lab, a project, or a particular engineer. 
Finally, data that managers needed for development pro- 
cess metrics wasn't always collected, 

DTS solves these problems in a way that is easy to learn 
and use. This paper presents the DTS solution first from 
the project management perspective and then in terms of 
user interaction. It describes the system's operational envi- 
ronment and shows the current status of DTS use at HP. 



Average Time Between Failures (Days) 




Managing Software Development with DTS 

DTS supports software development management by col- 
lecting and organizing defect data, and by automating the 
tracking of submitted and resolved defects. DTS collects 
data that both lab and project managers can use to answer 
questions about their software development processes. 
[iles of this data are the submitter's name, the name 
of the responsible project, the module that is defective, the 
date the defect was found, the symptoms caused by the 
defect, and the severity of the defect- See the Appendix for 
a complete list of the data items kept for each defect. This 
ifil..nnation can be grouped, summarized, and u^ed tor 
evaluating a product's development. 

Several graphical examples of summarized DTS data are 
given in Figs. 1 through 4. Although DTS does not currently 
generate graphs, it does provide the defect data that other 
tools can use to generate graphs. 

DTS provides defect information at the lab and program 
level. Data from DTS general summary reports can be used 
to generate a mean time between failures [MTBFJ graph 
(Fig. 1] and a defect arrival rate graph [Fig, 2] for either a 
single project or a group of projects. 

fur project managers, DTS provides summaries and 
synopses of project-level defect information. This data can 
he used to generate a defect resolution rate graph (Fig. 3) 
and a defect backlog graph (Fig. 4). 

DTS also provides project and engineer summary defect 



10 T 



Number of Defects 



Aug Sept 
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Fig. 2. Defect arrival raw graph, showing total number o! 
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Fig. 3. Defect resolution rate graph, showing defects re- 
solved as a function of time 



lists. These lists give a two-line synopsis for each resolved, 
open, or unreceived (submitted to, but not yet accepted by 
a project] defect. These synopses can be organized either 
by project or by engineer assigned to fix the defect. Fig. 5 
is an example of a project summary report for project dts. 
Managers will probably want to view other defect data 
relationships in addition to the examples shown above. 
The DTS report generator, DTS administrator utilities, and 
UNIX tools can be used to extract, organize, and summarize 
defect data from the ASCII-text defect reports [see Appen- 
dix). This summarized data can then be formatted as de- 
sired lor textual or graphical display. 

Submitting Defects 

Four DTS utilities allow a user to submit, receive, resolve, 
and summarize defect reports. A common user interface 
for all utilities makes DTS easy to learn and operate. 

When a defect Is found in a piece of software, the user 
submits a defect report by using the dtssub command at the 
user's workstation. DTS will then prompt the user for the 
data necessary to create a defect report. This includes: 

■ The submitter's name, phone number, electronic mail 
address, and project name 

■ The date the defect was found 

■ The name and version of the defective software 

■ The severity and urgency of the defect 

■ A one-line description of the problem 

■ The activity used in finding the defect 

■ The project responsible for fixing the defect. 

The user may also attach up to twenty-six related text 
files to describe the problem further, present a workaround, 
document a fix, or provide other information. 

After a defect report has been submitted, DTS moves it 
through the network to the machine that the responsible 
project has chosen to have its DTS defects sent to. When 
the incoming defect report arrives, DTS sends an electronic 
mail notification to the manager and engineers responsible 
for the project. 

Receiving Defects 

New (unreceived) defects that have arrived for a project 



are examined with the dtsrec command. The data for each 
unreceived defect is displayed, and the user is able to either 
(1) receive the defect report and accept responsibility for 
fixing it, (2) forward the defect report to another responsible 
project, or (3) push it back into the unreceived queue for 
later viewing. If the defect report is received, DTS prompts 
the user for: 

■ The priority assigned to the defect report 

■ The name of the engineer responsible for fixing it 

■ An estimated fix date. 

After the defect is received, an acknowledgment is sent 
back to the submitter, and the defect report is incorporated 
into the DTS defect data base on the receiver's machine. 

Updating and Marking Defects as Resolved 

After a defect has been researched and resolved, dtsupd 
is used to update and mark the defect report as resolved. 
At that time the user needs to provide: 

■ The type of resolution {e.g., code change, design change) 

■ The name of the module that was fixed (when applicable) 

■ The amount of engineering time it look to fix the defect 

■ The development cycle phase in which the error was 
introduced, found, and fixed. 

DTS notifies the submitter by electronic mail when the 
defect is resolved, and sends a copy of the defect report to 
the machine designated as the DTS archive for the site. 

Summarizing via DTS Reports 

The dtsrep command generates any of five different re- 
ports, each giving different levels of detail, and each aimed 
at different types of users. They are: 

■ General summary. Shows global totals for unreceived, 
open, resolved, and urgent defects for selected groups 
of projects. One likely grouping of projects might be a 
lab summary, listing totals for all the projects that make 
up a particular lab, 

■ Manager summary. Shows a two-line description for 
each of the defects belonging to a particular project, 
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Fig. 4. Defect backlog plot. 
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Protect Summary of Detect Information tor dts 

Total Sbowstopper Detects: 
Total Unreceived Defects: 

Total Open Detects t02 

Total Resolved Defects: 312 

Total Detects 414 

Engineer Detect Inform;. 



Steve,-. Blair 

CLLaoOOISO Submit Num 00034DSDsa OPEN S3 P:6 Recvd: 841006 
Dsc I type contrc!-D at finding activity' and dtssub quits on me 

CU-ab001S5 Submit Num- 0003lOSDsa OPEN S:2 P 6 Recvd: 841008 
Dsc: Hitting * D as response to resp_pro| prompt in forwarding unchanges ul 

DSDsaO0032 Submit Num: OOOOSSELbb OPEN S:2 P:4 Recvd: 841029 
Dsc: "dtssub -q another does only one delect and quits without asking 



Fig. 5. An example of a project 
manager summary report. 



sorted by responsible engineer. 

■ Engineer summary. Shows a two-line description for 
each of the defects assigned to a particular engineer to fix. 

■ Unreceived summary. Shows a two-line description for 
each of the unreceived defects. 

■ Engineer details. Shows all of the available information 
about a single defect report. 

Each of these reports can be viewed interactively, or sent 
to a file or printer to capture data for later analysis 

User Interface 

Each of the four DTS utilities uses a common user inter- 
face that provides on-line help, three different modes for 
novice, intermediate, and expert users, and easy-to-define 
user default values. 

The user interface makes DTS easy to learn and use. For 
example, when a DTS utility is being run, two forms of 
help are always available. One is a description of the field 
the user is prompted for. and the other is what data is 
appropriate for that field. While responding to a prompt, 
the user can hit the ESC key to obtain the field description. 
To determine what data is appropriate for that field (e.g., 
whether it is any string of characters or a specific selection 
from a list of items), the user types CTRL G. These help 
descriptions can be tailored for any specific site. 

Since users vary in their familiarity with DTS from first- 
time to accomplished users, and therefore vary in how 
much detail they want in DTS prompts, there arc three 
levels of prompting detail that can be selected: verbose 
(maximum information at each prompt), terse [minimum 
information at each prompt), and medium verbosity (which 
lies somewhere in between). All prompts in DTS are site 
configurable. 

Finally, any data field DTS prompts the user for can be 
preset to a default value. For example, the user's name, 
phone number, and electronic mail address can be de- 
faulted for the defect submission [dtssub) utility. This re- 
lieves the user of having to retype these items each time a 
defect is submitted. More subtly, default values allow DTS 
commands such as dtssub to be integrated into automated 
test suites. This can provide reporting of defects discovered 
during lesling, without direct human intervention. 



DTS Operational Environment 

DTS is currently supported on HP 9000 Series 500 and 
200 Computers running the HP-UX operating system, and 
on DEC VAX Computers running the 4.2 BSD operating 
system. 

The DTS network is divided into sites, which are clusters 
of machines running DTS software. Each site has a site hub 
machine that acts as a gateway for information between 
other site hubs and machines on the site (Fig. 6). This 
network topology fits in with the network that has evolved 
at HP consisting of machines running versions of the UNIX 
operating system. A DTS site typically corresponds to a 
divisional site in this network. 

There are three kinds of information thai flow between 
DTS machines. The first kind is the defect report that travels 
through the network as it moves from the submitter's 
machine to the receiving project's machine. Next, project 
summary data is collected from each machine's local defect 
data base and is distributed to all other DTS machines. 
Finally, transaction acknowledgments are sent via elec- 
tronic mail when the state of a defect report changes (e.g., 
when a defect report arrives, is received, or is resolved), 

Occasionally there are data transmission problems and 
i ilrfiid rupnrl isn't able to gel through, m I In 're ;ire nelwurl 
configuration problems and DTS doesn't know where to 
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send a defect report. In these cases DTS moves the data 
into a holding area and sends an electronic mail message 
describing the problem to the DTS site administrator. 

The DTS site administrator is a person who has been 
identified as the DTS support person for a site. This person 
defines the DTS intrasite network topology, handles DTS 
iii'-l,ill,iMun, keeps DTS nnntigunil inn files < intent, and 
coordinates local site customizations to DTS. After the ini- 
tial setup time, the administrator C8H expect to spend 2 to 
10 hours per month maintaining DTS. 

The initial disc space required for DTS is three mega- 
bytes. This number will grow during use as defects are 
submitted and received. For example, people submitting 
and receiving five defect reports per day for two projects 
on a machine can expect DTS disc space requirements to 
grow an additional megabyte per month (assuming an av- 
erage detet:! report length of 4000 bytes). Off-line data ar- 
chiving can be used to cut this number in half. 

DTS Today 

DTS was released Internally November 1, 1984 to soft- 
ware developers in three HP Divisions. Since then DTS 
has spread to other HP Divisions that develop software in 
the UNIX environment. Its user community has grown from 
25 to over 200 users located at more than 24 HP Divisions. 
Because of this growing level of acceptance, Corporate En- 
gineering's Software Engineering Laboratory lias identified 
DTS as an important software development and manage- 
ment tool, and has committed resources to its support, 
promotion, and evolution. 
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Appendix 




Contents of a Defect Report 


This 


table contains the length 


n byles. name, and desci pKon ol each data field in. 


a DTS dfifect report 




Length 


Name 


Description 


10 


Defect Number 


:■ --J when a fleieci 15 received 


1 


Detect Status 


New, open, or resolved 


ii 


Submitter N urn be" 


Assigned when the detecl la sunn— 


20 


Submitter Name 


Name of ihe person who submitted t y ie defect 


20 


Submitter Phone 


Thesubrmter scheme number 


20 


Submitter Address 


The submitter's electron ic mrfi* address 


20 


Test System 


The machfoe the defect was found on 


20 


Submitter Proieci 


Nan-e ot l he submitter's project 


! 


Date Found 


Date the tteteetwaa totmrj 


a 


Software 


The name al the sotiwar e that ,s suspected of 
be -ng defective 


■■' 


Version 


Version of Ihe suspect software 


1 


Severity 


The submitter's estimation d! Ihe defect 
severity 


1 


Showstoppar 


' y it (ti s d e feet l5 k eepi ng a p reject from 
rnesfpngaei i cai checkpoint 


72 


Description 


Seventy-two-character detect description 


2 


Activity Used 


Haw the submitter lound the defect 


! 


Fixing Time 


How Fonaj il took, to isa?ate. Hx. unit test, and 
document she defec" fix 


20 


fleSpons ibl a P-'mec L The p reject that s r capon 51 b"e ft) r f i xi ng 






the defect 


20 


Responsible Engineer The engineer as&.gned ro fix Ihe defect 


a 


Resolution 


How she defect rapor" was resolved 


1 


Priority 


This defect's fix priority 


n 


Resolve Dale 


Est mated date of rewlulion. dr date the 
defect was resolves 


40 


Fixed Module 


ThemoduJeordocumentat on changed 


10 


Related Delect 


The nurr.be r ct a d u pi icate o t relat ed de tec I 


6 


Date Recedes 


The date the detect report was received 


■ 


Phase fn< reduced 


t h e softwa re developme-nl 1 ifs eye le ph ese m 
which the defecs was introduced 


1 


Phase Found 


Th e sofrwa re deveiopmen: 1 .1 ec y c le ph a se m 
which ihe defec' was found 


1 


PhaseF'tfec! 


Th e softwa re devei opmen: I fecyc le phase 
•n which the defect was fixed 


2 


Times Reported 


The number of duplicates of this defect 


21 


Symptoms 


The symptoms of the problem 


i 


Workaround 


"y" i' a workaround to she defect exisls 


.'■' 


Fi&e Count 


The number ol related fiies attached to this 
delepl report 


iao 


P e serve c 


Data space reserved for DT£ 


ioo 


Unused 


Ad (3 1 or- e 1 oat a s pace avai ladle f or &■ tes 
to use 


rr> 


Related Files 


Up to 26 related files may be attached to any 
deled report 
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A Toolset for Object-Oriented 
Programming in C 

Object-oriented programming seeks to encapsulate entities 
in a program into objects, methods, and messages. It is 
useful for writing highly dynamic software that is well- 
structured and easily maintainable. This paper presents a 
set of tools that support object-with-methods data 
structuring. 

by Gregory D. Burroughs 



THE DATA STRUCTURES of a program are often com- 
posed of groupings of objects. For example, in de- 
scribing a map. one might have city as one class of 
objects. Related to each city are groups of objects: residents, 
natives, streets, parks, significant buildings, and so on. In 
the design of algorithms that operate on the map, it would 
be useful to be able to group natives of a city into a structure 
without worrying about the details of the structure's im- 
plementation. One notation might be: 

A city is | 
Name 

A Group "street" of streets 
A Group "residents" of persons 
A Group "natives' of persons 

I 

A person Is { 

Social Security Number 

Grouped by city of residence 
Grouped by city of birth 

> 

As the design of algorithms progresses, appropriate data 
Strut lures for implementing the groupings can be deter- 
mined. If reports that list a city's residents and natives 
sorted by Social Security Number are required, some vari- 
ety of tree might be used to tmpleiiH-Mit the residc-nl and 
native relationships. A convenient notation might be: 

A city is j 
Name 

Tree "residents" of persons 
Tree "natives" of persons 

1 

A person is { 

Social Security Number 

Node "residents" in a tree of persons 

Node "natives" in a tree of persons 

) 



with the concepts of grouping and grouped in implicit in 
the notations Tree ami Node. By this point in the design. 
the algorithms for manipulating persons relative to cities 
would be well-defined and, given the proper set of software 
tools, much of the program could be generated automati- 
cally. This paper describes a set of tools for generating 
objects and methods (rum class relationships as described 
above, and presents results of its use. 

Objects 

In an object-oriented program, data is organized into 
classes. A class contains its members, called objects, and 
operations for manipulating its members, called mplhnds. 
Objects can be thought of as the data record for the class 
and methods as tie functions that act on the data records. 
Cities and parsons are among the classes known to the 
above example. Oakland is likely to be an object in the city 
class, and clty-add-new-resident is likely to be a method for 
objects in the city class. 

One advantage of object-oriented programming is the 
ability of each class to hide its data representation from 
other classes. Such separation is supported through the 
concept of messaging. In traditional programming lan- 
guages, objects communicate by passing data structures to 
functions. This allows and even encourages methods of 

in hjeot to ush tin: struct um oi iibjw tsthej reference hi 

,! in! ■ ----..i.ui ■ hasi'd system, objects < ommunicate bj passing 
messages to other objects, with the recipient object deter- 
mining which method is appropriate for performing the 
requested action. One envisions the dynamics of a well- 
coordinated, properly staffed and trained team; each 
member performs assigned tasks, requesting assistance 
from Dther team members when necessary, but not med- 
dling in the tasks of others. 

Another advantage of object-oriented programming 
comes from the independence of representation and action. 
An object can ask lor an action without worrying about the 
particular type of the object that will do the action. Since 
it is the recipient that determines how to respond to a 
message, the requester can use the same message and the 
same transmission mechanism to request a particular ac- 
tion (for example, print yourself] from objects of diffi-n-iit 
classes. 
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Finally, objects can be trained Ai lions appropriate at 
one stage in a program's execution might not be the same 
actions that were appropriate at an earlier stage. An object 
can change the method it will use for a given message to 
reflect its current state. The object-method-message 
paradigm has been found to be effective not only within 
an individual program, but also between concurrent, 
cooperating programs. 1 2 

In particular, the method paradigm is appropriate for 
abstract data structures. Often, application programs find 
that their jobs consist of creating and traversing data struc- 
tures. Most standard texts present data structures and their 
methods le.g., additions, deletions, merges, traversals] in- 
dependently of any particular source of data. 3 *'' 5 That is, 
most operations on a data structure can he viewed as a 
method that manipulates just I he structure and sends mes- 
sages to the objects grouped in the structure when applica- 
tion specific information or actions are required. For exam- 
ple, the report that lists all residents of Oakland could be 
generated by the tree-traverse method walking the persons 
tree for the Oakland object and sending print messages to each 
person object it encounters. 

When data groupings are viewed in this object-met hods- 
message framework, program generation can proceed au- 
tomatically from data structure design. In I he example, 
once a tree has been selected to implement a grouping, the 
actions appropriate to creating and traversing the tree are 
also known and, in an ideal environment, should require 
little or no lime nr programming effort to implement. 

Implementation 

The following sections describe a toolset for automati- 
cally generating data records and methods from a descrip- 
tion at the grouping level as described above. An implemen- 
tation of the above example is used to explain the use of 
the package. The resulting C program source appears in 
the Appendix. Fig, 1 diagrams the use of the toolset. 

The toolset is built on top of the C programming language 
using C-preprocessor macros and UNIX™ utilities. There 

JMX a a trademark ol AT&T Bell Laboratories 



are two types of macros: macros thai generate data structure 
entries in a data record and macros that generate functions 
to manipulate the data structures. The UNIX utility make(i) 
is used to generate a template and rudimentary methods 
for each rial a class. In the examples that follow, C program 
syntax is loosely followed. The reader is directed to the 
bibliography for references on C and the UNIX operating 
system. 6 ' 7 - 8 

A dispatch table is the mechanism thai allows an object 
to map a message to the appropriate method. When a mes- 
sage is received, the object receiving the message extracts 
a m el hod selector from the message, then uses the selector 
as a key into the dispatch table to determine which method 
to invoke. A dispatch table can support dynamism in three 
places. First, the method returned for a given selector can 
vary over the life of the object. Second, the number of 
selectors and methods in the table can vary. Third, the 
table can support various levels of indirection in the lookup 
mechanism. The dispatch table for the toolset of this papei 
supports the first level of dynamism by providing a static 
number of run-time-modifiable selector-to-method map- 
pings for all classes of objects. Methods provided for each 
object include self-identification, self-printing, and com- 
parison with another object in the same class. The object 
class has two methods, object-new and object-free, for allocat- 
ing and deallocating objects in the class. The structure used 
to implement an object's dispatch table is a record: 



struct methods { 




int 


*(*new)(); 


In) 


(*free)Q; 


int 


(*key)(): 


int 


(*prlnt)(); 


int 


(*compare)() 



#define METHODS struct methods *methods 

Each object class is represented by a structure. The macro 
METHODS provides each object in the class with a direct 
link to its associated methods: 



User provides 

desired object 

classes. 



Skeletal Object 

Generating 

Makefile 




Object and 
Methods 

Templates 



User adds 

manipulation 

and structure 

macros. 




Data 
Structures 

and 
Methods 





struct <object> \ 


C Program 


METHODS: 


Source 


t* object specific slots *.' 



Fig. 1 . This figure diagrams the use of the object-oriented 
programming toolset First, the user interactively defines the 
ob/ect classes desired. The skeletal object generator gener- 
ates skeletal ob/ects and methods These consist of class 
initialization, object allocation, skeletal manipulation methods, 
and skeletal structure definitions. The user then adds appro- 
oriale manipulation and structure macros to the manipulation 
methods and structure macros The resulting source is pre- 
sented to the C compiler 



I; 

The macros MESSAGE and MESSAGES are used to send a 
message to an object: 

MESSAGE (sally, print) 

calls the print method associated with sally and provides sally- 
as the argument to print, while 

MESSAGE2 (sally, compare, joe) 

calls sally's compare method with sally and joe as arguments. 
Each object class is represented by a pair of files: 

< object >.h <objeet>.c 

The .h file contains the structure specification for the 
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object, while the .c file contains its methods. 

Pseudoaulomatic class generation is possible from this 
well-defined specification. A script make-object creates a h 
file containing a skeletal structure description and a .c file 
containing rudimentary methods. For each class, make-object 
generates a function that initializes the method table and 
a function that calls the initializers for all of the classes. 

Data Structure Macros 

Data structures consist of two parts. The first part de- 
scribes feat ures required in the records making up the strut ■ 
ture. The second part consists of actions appropriate to the 
data structure [insert, delete, traverse, union. ...). This toolset 
addresses both aspects of data structure implementation. 

The part of a data structure linking one data record to 
another forms a skeleton. Typically, the skeleton consists 
of two types of pointers: the head of the structure and 
members of the structure. Skeletons are of two forms, en- 
dogenous and exogenous. 4 Endogenous skeletons link ob- 
jects through fields inside the object's data record, while 
exogenous skeletons have a separate structure which points 
to objects from the outside. Endogenous skeletons tend to 
be used in groups that are all the same data type, since the 
data structure pointers are part of the data record definition. 
Methods for endogenous skeletons can be associated with 
the data structure itself, rather than with each object. Exo- 
skeletal data structures are more suited to groupings span- 
ning several data types, since the data type need not know 
the types with which it is grouped. In this case, methods 
must be associated with the objects. The greater flexibility 
of exDskeletal structures comes at a price of more declara- 
tions and somewhat larger data storage requirements. In 
the example, while methods remain associated with the 
objects. endoskeletaJ structures are used to reduce the 
number of declarations. 

Macros used to create data structures reside in files 
named: 

<data structures, 3. h 

where the suffix .s.h stands for structural header. As an 
example, the macros for creating an AVL tree 9 are: 

/» macro to generate an AVL tree root ♦/ 
#defineAVL_ROOT(rooLtype, tree_head_slot} 

struct | 

struct rooLtype *root; 

1 tree_head_slot 

t* macro to generate an AVL tree node •/ 
#define AVL_NODE(tree_type. tree_thread_slot) 
struct j 

struct treejype * I child; *rchild; 
int balance; 

| tree_thread_slot 

#define BALANCED 

#dsfine BALANCEDJ-EFT -1 
#define BALANCED_RIGHT 1 

In the example, these macros could be used to create either 



an exoskeletal or an endoskeletal data structure. The decla- 
rations: 

struct cfty.type i 

METHODS 
string name; 

AVLROOT(person_type. nativesjiead); 
AVLROOT(person_type. residents^ 



struct person_type 
METHODS; 
string SSN; 

AVLNODE(person_type. natives_thread); 
AVl_NODE(personJype, residents_thread); 



woufd generate an endoskeletal AVL tree structure. Note 
that the class declarations are not cluttered with the details 
of the record structure needed to implement the tree. 
Macros used to create methods reside in files named: 

<data structure >.m.h 

where the suffix .mh stands for manipulation header. Some 
of these macros manipulate the record structure required 
by the data structure — for example, the macro to initialize 
a node before insertion in an AVL tree: 

#define AVL_NODE_INIT(node.obj, tree.thread) 
n ode_obf-Hree_th read . Ic hi Id = N U LL ; 
node_obj— *tree_th read. rchild = NULL: 
n ode_o bj-^t ree_lh read . ba !an ce " B ALAN C E D 

When information specific to the objects in the data struc- 
ture is needed, the macros use the methods associated with 
the objects. For example, the following macro checks 
whether a node is already present in an endoskeletal AVL 
tree: 

#define AVL_CHECK 

(tree_rooLobj, tree.root. 

found_obj, found_obj_type. treeJhread. 

foundjlag) 

I 

Struct found_obj_type 'marker; 
f* 

* here should be checks to insure that the tree 

* root exists and the like 
«,■ 

foundjlag = false; 

marker = tree_root_obj-*tree_root.root; 

while (marker EXISTS) { 

switch (MESSAGE2 (lound.obj, 

compare, marker)) ) 
case EQUAL: 

foundJIag = true; 
marker = NULL; I* please exit *<' 
break; 
case LEFT: 
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default: 



marker - marker -* 
treejhread.lchild; 

break; 

RIGHT 

marker = marker — » 
treejhread.rchild: 

break; 
t: 

EAULT; 



1 



In the example, ihe function city-has-resident? could be 
generated as follows: 

int city-has-resident (city, person) 

struct city_type *city; 

struct personjype '•■person; 



I 



} 



int found: 

AVLCHECK (ctty, residents.head, 

person, personjype, residentsjhread, 

found); 
return (found); 



Consistent programming style relieves some of the clutter 
resulting from inclusion of type names in the parameter 
list, as does use of meaningful type and slot names. 

Conclusion 

The toolset provides a variety of data structures, most 
having their origin in a particular application where the 
toolset w r as used. Among the structures are basic data struc- 
tures (singly and doubly linked lists with methods for 
stacks, queues, dequeues, and insertion sorted lists, binary 
trees with traversals. iterators), height-balanced trees (AVL 
trees). 9 self-adjusting trees [splay trees), '"and k-d trees. 11 
New structures can often be created by modifying existing 
ones. 

Three programs represent the types of software developed 
using the toolset. TEST-BED is a test bed for the investigation 
of digital network traversal algorithms, VFORMAT is a dis- 
crete-event simulation time queue, EXPANDER is a hierar- 
chical electrical circuit expansion program. Experience 
suggests that the tools are most useful in programs where 
the software author can naturally cast the application into 
the object paradigm and where data organization and tra- 
versal account for most of the programming task, 

TEST-BED was written as an environment for exploring 
structural test generation algorithms for combinational cir- 
cuits. 1 " Initial object and data structure design required 
two engineering days. Input data formats were borrowed 
from the interactive logic simulator. ILS, l:! and a naive 
input reader. Rank ordering and signal propagation al- 
gorithms were quickly implemented. When it was realized 
I hat the initial data structures would not support all the 
traversals desired by some of the test generation algorithms, 
new structures were easy to add to the skeleton. Use of 
this toolset allowed implementation to proceed quickly 



and directly from data organization with the benefit that 
more investigation time was available to concentrate on 
algorithm and data structure design and subsequent al- 
gorithm performance analysis. 

VFORMAT was written as a specific niche design tool 
for a specific Hewlett-Packard logic design team. With such 
a narrow scope, the design goals of VFORMAT emphasize 
Functionality and speed of implementation rather than per- 
formance and enhancability. However, use of the toolset 
allowed data organization design to proceed assuming that 
efficient data structures could be developed as readily as 
inefficient structures that merely worked. The result was 
a quickly developed lool that performed considerably bet- 
ter than the minimum expectations. 

EXPANDER manages an electrical circuit description 
used to communicate information between several pro- 
grams. Mosl of EXPANDER's actions involve a traversal of 
a hierarchy of blocks and instances that describe circuit 
connectivity and parameters. The object-methods-message 
implementation allows traversal control to he implemented 
and debugged entirely independently of traversal actions. 
Each traversal of the hierarchy is regarded as an instance 
in the class of traversals whose actions are guided by a 
control object. Before a traversal starts, a traversal object 
is instantiated. This object is provided with a dispatch 
table of methods it will use to perform its specific al- 
gorithm. Then, at each potentially interesting location in 
the traversal, the control object sends a message to the 
traversal object to perform the action appropriate for this 
location in the hierarchy [e.g., process-a-cfiild. ret urn- from- pro- 
cessing-subtree) or to obtain the next location for processing 
(e.g., seiect-a-child. get-next-sibling). 

EXPANDER demonstrates the toolset's utility on large, 
complicated programs. There are twenty object classes 
known to EXPANDER, some of these group or are grouped 
in as many as ten other object classes. Structure-generating 
macros make the organization and implementation more 
readable. An objects-methods-messages implementation 
allowed data, action, and control to be considered, im- 
plemented, and debugged separately. This separation eases 
the tasks of adding and modifying functionality and in- 
creases confidence in the program, 

Directions tor Further Study 

The toolset presented in this paper was started before 
the general availability of commercial preprocessors and 
languages that directly support object-method-messages 
programming. Its primary goal was the support of quick 
implementation of data-structure-intensive programs. While 
it achieved its goals, initial writing and debugging of long 
macros requires a bit more effort than general C program- 
ming. Special makefile enlries and the like make the job a 
bit less demanding, but the existence of commercially avail- 
able languages whose definitions support objects-methods- 
messages [such as Common Lisp) suggest that program de- 
velopment should proceed in those languages. 

This package has proved its usefulness in the rapid pro- 
totyping of data-structure-infensive programs. However, 
the program designer still needs to determine which struc- 
tures are appropriate for the application at hand from either 
training or experience. An expert system could be de- 
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veloped to assist selection of appropriate groupings given 
the desired operations belween object classes. When a 
grouping is described, structure declarations for the i: 
and method functions for the data structures could be gen- 
erated automatically. This could then be coupled with a 
graphical interface for describing and documenting the ob- 
ject classes, their groupings and the operations. 
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Tools For Automating Software Test 
Package Execution 

Developed by one HP Division and now used by others, 
these two tools reduce the time it takes to develop test 
packages and make it easy to reuse test packages in 
regression testing. 

by Craig D. Fuget and Barbara J. Scott 



TWO SOFTWARE TESTING TOOLS in use at HP's 
Data Systems Division are the Virtual Terminal and 
the Scaffold Test Package Automation Tool and Test 
Package Standard. 

The Virtual Terminal tool runs on the HP 125 Computer 
and is used to automate interactive testing of HP 1000 
Computers, It simulates keyboard input to the host system 
and saves the input and output for comparison with master 
result files. It is also useful for testing non-forms-mode 
programs on HP 3000 Computers (the HP 125 hardware 
doesn't support block mode). 

The Scaffold Test Package Automation Tool and Test 
Package Standard are used to create and run test packages. 
The Scaffold provides tools for test package creation and 
setup, and for running the tests and verifying the results. 
The Test Package Standard consists of documentation stan- 
dards for test plans, test packages, and individual tests. 
The Scaffold was originally developed using the HP-UX 
operating system and has been ported to the HP 1000. 

Virtual Terminal 

The Virtual Terminal tool (VT) was created to allow au- 
tomated regression testing of the interactive features of HP 
1000 Computers. It has been used in cases where normal 



test automation is impossible (e.g., screen-oriented interac- 
tive programs). We have found that this improves regres- 
sion tesl accuracy because each replay of the test causes 
exactly the same data to be entered. We have also found 
this to be a great productivity aid because the test engineer 
only needs to type the test data once. 

Since all of the system's output is saved each time the 
program is run, it is simple to track changes in the system 
by using file comparison tools, thus automating result ver- 
itication. This improves test accuracy. 

Test automation is broken into two parts; the initial run 
where the engineer instructs the tool on how to test the 
system, and succeeding runs where the tool repeats what 
it was told. The two tasks are handled by the programs 
XMS and XVT, respectively. 

Before the initial run, the interactive tests are carefully 
planned to ensure that all of the functions of the system 
under test [SLIT) are covered. Once this is done, the SUT 
is prepared with the latest revision of the software to be 
tested. 

To set up for the run, the engineer attaches the HP 125 
to the test system, and then runs XMS. Because XMS is 
transparent to both the user and the SUT, the lests can be 
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typed as if they were entered from a normal terminal. How- 
ever, all of the activities that occur are recorded (see Fig. 1). 

As the test progresses, the engineer manually verifies the 
responses, in the event that there are no defects, or that 
any defects that exist are minor enough to allow completion 
of the tests, the entire set is executed, and the engineer 
presses the softkey LOCAL OP SYS on the HP 125 to signal 
completion. In the event that the tests cannot be completed. 
the sol vent baLk for correction and : - begun 

again with XMS. 

The XVT portion of the virtual terminal is generally used 
when a new software revision is introduced to the test 
phase, when a new software release (e.g., a product change 
order) occurs, or when a specific test should be rerun sev- 
eral hmes until it is passed. When such a need for regression 
testing arises, the engineer simply reconnects the HP 125 
to the system under test, finds the files created by the XMS 
program, and invokes XVT. 

XVT enters the keystrokes typed by the user in the initial 
run to the system under test. All of the system's responses 
(including character echoing) are sent both to the screen 
and to a second log file (see Fig. 2). 

XVT and XMS communicate with each other through a 
command file, All of the user's keystrokes, along with ad- 
ditional information (e.g.. some timing data), are stored in 
this file. 

All of Ihe tesl system's responses are stored in log files 
on each run, thus creating a history of the system's perfor- 
mance (see Fig, 3), 

As stated above, the initial run must be verified manu- 
ally. However, this can be done after the test has concluded 
(by listing the log file). Subsequent runs can be verified 
semiautomatically by comparing the initial log with the 
current one. Several programs are commercially available 
for this. We have been using DIFF* by Mark of the Unicorn. 

In principle, once a product is ready for release, the tests 
should be run one final time to obtain a baseline for com- 
parison with any future release. 

Besides its use at Data Systems Division for testing HI 1 
l(j(j() operating systems, u spei hi! version til VT la being 
used by HP's Information Networks Division. It uses both 
the HP 125 and an HP block mode terminal (e.g., the HP 
2ii24| to test forms-mode programs on the HP 3000. Over 
1200 test scripts are currently maintained in a library for 



this tool. 

Scaffold Automation Tool and Test Package Standard 

The Scaffold Automation Tool and the Test Package Stan- 
dard were developed jointly by software quality engineer- 
ing and the HP-UX* validation project. They are currently 
supported by the Software Engineering Laboratory- of HP's 
Information Technology Group. The HP 1000 version is 
supported by the Data Systems Division. The motivation 
behind their development was to provide tools that reduce 
the time to develop test packages and the time to reuse 
them in regression testing. 

The Tesl Package Standard defines the physical organi- 
zation of the test package. This organization is required by 
the Scaffold and takes advantage of the hierarchical file 
system. It allows many test suites to be stored in one direc- 
tory structure and is easily adaptable to varying logical 
organizations. The Standard also provides skeletons and 
documentation for writing test plans, test programs, and 
test package documentation. 

The Scaffold provides tools for automating test creation, 
and for setup, execution, verification, and archival of mul- 
tiple sets of test results. Verification is done by comparison 
of the test results with master result files. 

The Scaffold requires a physical directory structure as 
shown In Fig. 4. The directories are divided into two 
groups: 1) Scaffold tools and administration and 2) the 
actual test directories. 

The contents of the tools and administration directories 
are: 

■ ADMIN Scaffold tools 

■ DOC .Scaffold documentation 

■ RESULTS Record of which tests passed and failed 

■ BAD Output from tests that failed 

■ GOOD Output from tests that passed. 

Test directories are distinguished by names beginning 
with lowercase letters. 

Kai.h test «n>ii|' dirm lory contains B three- level directory 
structure as shown in Fig. 5. These three levels are referred 
to as group-level, section-level, and function-level direc- 
tories. 

The DOC directory should contain the test plan, test pack- 
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Fig. 4. Scaffold directory struc- 



ture 



age documentation, and test catalog for all the tests in this 
test section directory. Each function level directory con- 
tains all the test programs and scripts for a particular func- 
tion being tested, The structure of the function level direc- 
tory is shown in Fig. 6. 

The only required file in each function level directory 
is prog. Optional files are Build, std.out, std.err. std.fil. and std.in. 
The purpose of each of these files is as follows: 

■ prog Executable to run all tests 

■ Build Executable to set up test environment 

■ sid. out Master test output 

■ std.err Master error output 

■ std.fil Master output to additional file 

■ std.in Test input for prog. 



to select any subset of test directories for execution. Thus, 
with an appropriate breakdown of the test directories, the 
user can separately run any tests that need special re- 
sources. This also allows the user to combine all test pack- 
ages under a single scaffold structure and selectively run 
any combination of the test packages. 

Test Package Creation 

The first step in creating a test package is to write the 
test plan. This file is named TESTPLAN. The test plan should 
define all the tests and tools needed, as well as any 
hardware and software requirements. The test plan skele- 
ton shown in Fig. 7 defines the contents of the test plan. 
The Standard also provides a skeleton with UNlXnroff docu- 



Fig. S. Group-level and section- 
le'/e! directory structure. 



include is an optional directory at both the group level and 
the function level; it may contain files common to many 
tests at that Level. 

The group/section/function directory scheme was origi- 
nally chosen to fit the organization of the HP-UX Reference 
Manual. That is, the group level corresponds to different 
HP-UX versions, the section level to sections of the Refer- 
ence Manual, and the function level to individual com- 
mands and system or library calls. 

However, this organization easily adapts to various log- 
ical groupings. For example, a group-level directory might 
contain all ihe compiler or data base test packages, broken 
down into appropriate section and function-level direc- 
tories. Similarly, a section directory containing all tests for 
a file management package might have separate function 
d i rectories for interactive tests, tests that require superuser 
capabilities, tests that require a tape drive, error-producing 
tests, and other general lests. 

The Scaffold tools have an option that allows the user 



merit formatting commands. 

The next step is to create the tests and tools defined in 
the test plan, The Standard defines the header comment 
section for each test program [see Fig. 8). The create script 
automates this process. This script creates the file and in- 
serts the header comments, leaving the user in an editor 
to complete the file. 

To insert the header comments, the proper comment 
i haracter is determined from the file name and inserted 
around the header, create can also be used to create source 
files using the UNIX version control utilities SCCS orRCS. 

In addition to the test programs, Build, std.out, std.err, std.fil, 
and std.in should be created if necessary. 

Once all the tests and tools in the package have been 
completed, the test package documentation is written. This 
file is named README. The purpose of this file is to docu- 
ment any special execution requirements or procedures. 
The test package documentation skeleton shown in Fig. 9 
defines the contents of this document. As with the test 



B 



eesi program files 



Fig. 6. Fund/on directory struc- 
ture. 
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1. INTRODUCTION 

riMill 

1 .2 Reference Documents 

2. TESTING REQUIREMENTS 

2.1 Hardware Requirements 

2.2 Software Requirements 

3. THE TESTS 

e*( Are* 1) 

3 2 iTest Am 2) 



In (Test Area n) 

4. AUTOMATION PLANS FOR THE TEST PACKAGE 

4.1 Methods of Automation 

4.2 Eitent ot Automation 

5 TOOLS 
Fig. 7. Tesr plan skeleton. 

plan, a skeleton with UNIX document formatting com- 
mands is also provided. 

As the tests are being developed, they should be or- 
ganized and put into a scaffold structure. The tests should 
be grouped at the section level according to the sections 
defined in Chapter 3 of the lest plan. The TESTPLAN and 
README files should be put in the section-level DOC direc- 
tory. 

Test Package Execution 

The execution of a test package is broken into four parts: 
setup, execution, verification, and results archival. Each 
of these steps is automated by the Scaffold tools. 

There are two scripts for test setup; gettest and buildtest. 
gettest is used to create a source scaffold from a scaffold 

The name Of thl* Ills is < filename > 



(c) Copyright Hewlett-Packard Company 1985, 
All rights reserved. No part of this program 
may be photocopied, reproduced or translated to 
another program language without the prior 
written consent of Hewlett-Packard Company 



Created on <date> by aulfior s new .) 

Changes: 

i-lude date. name, description and reason. > 

This file 

<One tine description of what file tests or does / 

Calls tested: 

t Names of the system calls or commands which are > 
• tested by this program, including the mami.e 

Description of this test: 

< Specify here using as many lines as necessary. > 

Input parameters: 

Expected results: 

Side effects ot this test: 

Supporting tiles and relationship: 

■ Test-source-code goes here > 

Fig. 8. Test program header skeleton. 



containing version controlled sources in SCCS format, op- 
tionally specifying the revision level. The default is to get 
the latest revision, gettest creates a copy of the SCCS scaffold 
directory structure, copying directly any non-SCCS files 
and copying the specified revision of any SCCS Bit 

buikJtest does the actual setup work. Its basic operation is 
to execute Build in each function-level directory. If Build 
doesn't exist in a directory, buildtest compiles all C source 
files in the directory, storing the executable code in prog. 

Test execution, verification, and results archival are au- 
tomated via runtest. runtest executes each prog file in the test 
function directories, redirecting the standard output and 
error output to res. out and res. err respectively, and taking 
input from std.ln if it exists. 

After prog completes, res. out and res. err are compared to 
the files std.out and std.err. In addition, if prog created res M. 
it is compared to std fit. The test is considered to pass if 
there are no differences, and to fail otherwise. The tests 
will also pass if std.out or std.err doesn't exist and the corres- 
ponding res out or res err is emph . Note that although neither 
std.out, std.err, norstd.fii is required, this is not recommended 
since it may be impossible to tell if the test passed, such 
as in the case of a program aborting unexpectedly. 

At the start of runtest, a test ID is assigned, which is used 
to identify the results from this test run, and allows the 
results of multiple runs of the same tests to be archived, 
runtest creates a file named test-Id in the directory RESULTS. 
This file contains the names of each function-level test 
executed and whether each passed or failed. 

For tests that fail, all the output is saved in BAD, identified 
by the test ID and the function-level path nanu-. 

No output is saved for tests that puss, unless prog rreated 
a directory called savedir in the current directory, savedir is 
used for output that requires manual verification. If savedir 
exists, its contents will be copied to GOOD, again identified 

1 INTRODUCTION 

f .1 Modification Log 

1.2 Reference Documents 

1.3 Management Information 

2 ORGANIZATION OF TEST PACKAGE 



3. 


DESCRIPTIONS OF TESTS 


3.1 


General Instructions 


3.1.1 


H W h S W Requirements 


3.1.2 


Set Up Instructions 


3.1.3 


Loading 


3.1.4 


Running 


3.1.5 


Verifying the Results 


3.1.6 


What it it doesn't work? 


3.t.7 


Side Effects 


3.2 


< Test area n i 


3.1.1 


HW1SW Requirements 


3.1.2 


Set Up Instructions 


3.1.3 


Loading 


3.1.4 


Running 


3 1.5 


Verifying the Results 


3.1.6 


What If It doesn't work? 


3.1.7 


Side Effects 



Fig. 9. Test package documentation skeleton 
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by the test ID and the function-level path name. 

There are two ways to spei.ik ,1 subset ut tests to buildtest 
and runtest — either by using a suffix or by specifying the 
individual directory names, 

A suffix has the form <.su«ix> and is used to denote a 
classification of tests that spans many different group, sec- 
tion, or function directories, such as interactive tests or tests 
requiring superuser capabilities. The suffix must he ap- 
pt-Tiiled i I'm- name? ni the.i'ilc: usr'd by buildlesl rind runtest 
(Build, prog. std..{oul,err,fil.in}, *.c]. 

If a suffix is given, buildtest and runtest will execute only 
on directories with files containing that suffix, i.e.. Build 
.suftix> or prog<. suffix >. If no suffix is given, only files con- 



taining no suffix will be used in execution. 

In addition, any number of Individual directories can be 
selected. If a group- level or section-level directory is 
specified, buildtest and runtest will execute on all test sub- 
directories in each specified directory. 

A suffix and directories can both be used, in this case, 
buildtest and runtest will execute on the designated directories 
where files with the specified suffix are found. 
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Using Quality Metrics for Critical 
Application Software 

Software metrics have been used to evaluate the quality of 
a computer-based medical device produced by a large- 
scale software development project. 



by William T. Ward 

SOFTWARE QUALITY is not a precisely defined pa- 
rameter. There are several attributes that can be used 
to measure the quality of software. A fist of these 
attributes might include reliability, maintainability, sim- 
plicity of use, testability, understandability of the program 
code, upgradability, portability, and others. 

The nature of the intended application frequently deter- 
mines how the quality of software will be judged. For exam- 
ple, simplicity of use would probably be a useful software 
quality metric for a program designed as a word processor 

SOS PROBLEM DESCRIPTION FORM 



PRODUCT: 



DATE FOUND: _ 
REPORTED BY: 



QA NUMBER: 

MUST WANT 



PROBLEM DESCRIPTION: 



DATE RESOLVED: 



DESCRIPTION OF FIX: 



Fig. 1. Standard data entry form completed by the test 
engineer 



for inexperienced typists. Similarly, maintainability of the 
code might be a useful metric for a large program that is 
expected to be in use for several years and thus may require 
modification by programmers not involved in the original 
design effort. 

Reliability of operation is a key aspect of software quality 
in most applications. The software product discussed in 
this article is required to provide continuous, accurate 
monitoring of critically ill patients. The software must be 
reliable, since unplanned system shutdowns or crashes 
could jeopardize patient safety. 

This article discusses the generation of several software 
quality metrics from data collected during the system inte- 
gration stage of the patient monitor software development 
cycle. The evaluation of these metrics has provided the 
quantified estimates of software quality required for prod- 
uct release into a critical application environment. 

Development Project Overview 

The project under study involved the development of 
the software and firmware for a computer-based ECG 
monitoring system to be used for continuous cardiac pa- 
tient surveillance in a hospital coronary care unit. 

Approximately four years transpired from the early proj- 
ect design stage to the completion of system testing and 
resultant release of the product for customer shipment. A 
total of ten to twelve engineers were involved at some point 
with the project, and the average staff was seven to eight 
at any one time. Approximately 85,000 lines of Pascal 
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source code, excluding comment or blank lines, and 50,000 
lines of microprocessor assembler code form the software 
and firmware basis of the produi I. 

Software Testing Overview 

The development sequence for this project closely fol- 
lowed Ihe model as outlined by Fagan. ! There were a design 
stage, a coding stage, and a final testing stage. The coding 
stage included unit and module testing as well as m 
implementation. The te- of the project included 

both integration and system testing. 

The software testing effort and resultant metrics dis- 
cussed in this article refer specifically to this final testing 
phase (if Ihe product development cycle. Approximately 
eight months were required for this effort, using the full- 
time services of one test engineer and the part-time services 
of other varied personnel. The total software test effort 
required approximately 16 person-month.',. 

B lack-box functional testing was used extensively in 
multiple test environments during the software testing 
stage of this project. The functional testing thai was per- 
formed can be categorized as either specifications testing, 
random values testing, or special values testing. 
Specifications testing. A free-form prose document, the 
product Ebcterna] Specification, was created during the de- 
sign phase of the project. This document was maintained 
during prnducl development and then passed to the test 
group at the beginning of the system testing stage. 

The External Specification contains the operating specifi- 
cations for (he product suit wan;. All functions the product 
software is designed to perform are listed in the ES. This 
document formed the basis of the majority of the functional 
testing performed on ihe product. 

In practice, a checklist of product Functionality was gen- 
erated from the ES and this checklist was used as a lest 
script during system testing. 

Random values testing. The intent of this testing technique 
was to investigate product behavior when the software was 
exposed to an unrealistic series of input values. Because 
of the critical nature of the intended producl application, 
the software should respond in a predictable, well-defined 
fashion. even when exposed loan undisciplined user assault. 

SQS WEEKLY STATUS REPORT 



An example of a random values test is the input of a 
series of keystrokes to request a nonconnected sequence 
-tem services. Altered, varying-length keystroke se- 
quences can form the basis for random values testing. 
Special values testing. The application of input data that 
was considered legal but not probable, or that stressed the 
as termed special values testing. The intent of 
a technic . > evaluate the ability of the 

product code to respond to maximum-configuration condi- 
tions or to poorly defined, ambiguous conditions. 

An example of special values testing is the evaluation 
of the product in both the minimum and maximum config- 
urations. These minimum and maximum values cat: 

ber supported hardware configurations or to various 
software functions. 

Multiple test environments. A major software test method- 
ology used in this project was to create and maintain mul- 
tiple environments for product testing. Four separate, con- 
current in-house test environments and a fully imple- 
mented, hospital-based field trial site were used during the 
software testing stage of this project. 

Each of the test environments was used to evaluate the 
product code under different input conditions. For exam- 
ple, test environment 1 was used for the majority of the 
specifications testing effort, while test environments 4 and 
5 were used for special values testing. Test environment 3 
was primarily the random values test station, while the 
coronary care unit for a hospital served as test environment 
2, 01 the field trial system. 

The intent of using multiple test environments is to ex- 
pose the product to as wide a variety of input conditions 
as possible. Of primary importance was the feedback pro- 
vided by the field trial. Failure of a produi 1 to perform 
well in an actual user environment indicates that the design 
and test efforts preceding the field trial have not been 
adequate. 

Collection and Presentation of Test Data 

An Image/1 not) data base was created to store information 
about problems discovered in the product during the soft- 
ware testing effort. The Image utility program kedit was 
used to enter Information into the data base. Several Pascal 
programs were created to retrieve the data from the data base 
and to present that data in several useful report formats. 

Fig. 1 illustrates a standard data entry form. When a 



PRODUCT:. 
DATE: 



RESULTS OF MULTIPLE TEST ENVIRONMENTS 



SUMMARY OF WEEKLY STATUS CHANGES: 

3 Hems have been reported as NEW. 
These are: 255 257 258 

4 items have been RESOLVED 
These are: 127 133 249 250 

TOTALS FOR ITEMS ON PROBLEM LIST: 

3 items are In status NEW. 
Items are In status LAB. 

4 items are in status QTST. 
t? items are In status NREP 
220 items are In status RES. 

Fig. 2. One of several reports generated from the problem 
data base 





#OF 
TEST HOURS 


* OF 
ERRORS FOUND 


SYSTEM #1 


3840 


261 


SYSTEM #2 


2350 


1 


SYSTEM #3 


1700 


10 


SYSTEM #4 


330 12 


SYSTEM #5 


330 


2 



Fig. 3. Results of the live separate, concurrent test environ- 
ments. 
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problem was found during product testing, the test engineer 
completed the problem description farm. This information 
was then entered into the data base by means of the KEDIT 
utility program. 

Weekly meetings between the test group and the develop- 
ment group provided a forum for status updates concerning 
product testing. Fig. 2 illustrates one of the several reports 
generated from the Image data base by the test group. This 
particular reporl indicates which problem items have 
changed status since the last weekly status meeting. The 
information in the Image/lOOO data base was used to gen- 
erate each of the software quality metrics. 

Software Quality Metrics 

Fig. 3 illustrates the results of the five separate, concur- 
rent test environments. Several conclusions can be drawn 
based on this data: 

1. Specifications testing was clearly the most effective test- 
ing methodology, yielding an average of 14.73 test hours 
to find a problem with the code. 

2. The field trial results were somewhat surprising, with 
only a single unique problem discovered after 2350 
hours of clinical product use. The implication here is 
that the in-house test environments together created a 
superset of the input conditions encountered at the field 
trial. 

3. Although the random values testing was not very pro- 
ductive in terms of errors found per test hour, the prob- 
lems discovered in this environment tended to be se- 
vere, frequently causing system crashes or hangs. 

Fig. 4 lists the additional software quality metrics gener- 
ated for this product at the time of customer release. These 
values refer specifically to test environment 1 , the specifi- 
cations testing environment. These metrics have been de- 
fined as follows: 

Test hours logged. 3840 test hours were logged during the 
software testing effort. This value includes only those times 
during which active testing was in progress and input data 
was present for the system. 

Count of reported errors. 261 specific problems were found 
in the product during the software testing effort. Of these 
reported problems, a full 90% (234] required code changes 
lo fix. The remaining 27 items were classified as not repro- 
ducible (13) or as documentation issues needing clarifica- 
tion (12) or as requests for enhancements in a future release 

SUMMARY OF SOFTWARE QUALITY METRICS 

1) 3840 TEST HOURS LOGGED 
21 261 REPORTED ERRORS 

3) 135.000 NONCOMMENT SOURCE LINES OF CODE 

4) 1.93 DETECTED ERRORS PER 1000 LINES OF CODE 

5) 14.73 TEST HOURS PER OETECTED ERROR 

6) 28.4 TEST HOURS PER 1000 LINES OF CODE 

7) 4.3 WEEKS REPAIR TIME PER ERROR 

8) PREDICTED POSTRELEASE FIELD FAILURES = 

1 ERROR PER 6.67 MONTHS 



of the product (2). 

Number of lines of source code. The product software/ 
firmware line count was 135,000. The software consisted 
of 85,000 noncommenl, nunbhink lines of Pascal source 
code. The firmware consisted of 50,000 lines of noncnm- 
ment microprocessor assembler source code. 
Detected errors per 1000 lines of code. With 261 reported 
errors and 135,000 lines of source code, a ratio of 1.93 
errors per 1000 lines of code can be derived. This value 
compares favorably with typical values reported across the 
industry for similar software/firmware applications. 23,4 
Test hours per error and test hours per 1000 lines of code. 
14.73 test hours were required, on the average, to find each 
of the 261 reported problems. 28.4 test hours, on the aver- 
age, were spent on each 1000 lines of source code. These 
values are difficult to interpret, but are useful in planning 
the amount of time required for software testing of similar 
products. 

Repair time per error. During the software testing phase, 
each error discovered required approximately 4.3 weeks 
to repair and retest. The mechanism for reporting newly 
discovered problems was a weekly status meeting between 
the test group and the development group, and not all 
reported problems were solved immediately. These factors 
tended to inflate this value of 4.3 weeks/error for repair 
and retest time. 

This MTTR (mean time to repair) metric can be benefi- 
cially applied to the postrelease life of the product. For 
example, an estimation of ihe support group requirements 
after product release should be influenced by this metric. 
A high MTTR value might be indicative of a complex prod- 
uct, requiring nontrivial and time-consuming repair efforts. 
Conversely, a low MTTR could suggest that all the neces- 
sary support tools for the product are in place and that 
future repair efforts will he uncomplicated. 
Predicted postrelease field failures. The value of this met- 
ric was calculated from the test data using a modified ver- 
sion of a model developed by Simkins. 6 The key inputs to 
the model are the number and rate of error detection during 
the testing phase of the project and the estimated effective- 



Combined "Must-Fix 
Errors Errors Only 



Weekly Error Count 




10 15 

Number of Test Weeks 



20 



25 



Fig. 4. Quality metrics generated for the patient monitor soft- 
ware product at the time of customer release 



Fig. 5. Rate of error detection during ihe software testing 
phase 
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ness of the test environment relative to the field environ- 
ment. The predicted value for this metric of 1 error per 
6,67 months of field exposure refers specifically to prob- 
lems of a serious nature that would impair the proper func- 
tioning of the system. 

Rate of error detection. Fig. 5 illustrates the rate of error 
detection experienced during the software testing phase. 
Assuming a fairly constant testing effort, the graph of Fig. 
d indicates that further testing of the software in aj 
changed environment would probably yield little produc- 
tive return. 

Conclusions 

Various techniques and metrics can be employed to as- 
sure and quantify the high level of quality required of crit- 
ical application software before release to customer use. 
Several conclusions concerning these techniques and met- 
rics can be drawn, based on the product discussed in this 
article. 

Specifications testing can be very productive in terms of 
problems discovered per test hour. The key requirement 
for the successful application of specifications testing is 
an accurate statement of product functionality — a docu- 
ment similar to the External Specification discussed in this 
paper. This document can be the basis for the specifications 
test script. 

Multiple test environments can be used to good advan- 
tage during software testing activities. The greater the diver- 
sity of the input data applied to a product under test, the 
higher the probability that problem areas of the code will 
be discovered. Another potential advantage of multiple test 
environments is that the use of different hardware sets to 
coincide with each lest environment can highlight possible 
hardware/software interaction problems not readily appar- 
ent with a single hardware test set. 

It is particularly important that the product be exposed 
to a environment that closely approximates the intended 
use environment before release of the product. A properly 
implemented field trial is one method for achieving this 
type of product exposure. Substantial testing must be per- 
formed on the product before its introduction to a live field 
trial environment. This is necessary to ensure that unex- 
pected, severe problems in the code at the field trial do 
not jeopardize the critical-application use of the product. 

Tile release (if software destined for a critical applii atii.ni 
should be contingent on product metrics that satisfy a pre- 
cisely defined range of values. For example, one oi the 
Strictures for product release might be the requirement that 
a specific number of continuous test hours elapse without 
the discovery of a problem in the code. One of the require- 
ments for the product discussed in this paper was a week- 
long interval of tesi time without the appearance of any 
serious problems. 

A logical expression that relates the various release re- 
quirements for a software product based on metrics might 
be as follows: 

Product Release State : = S1 AND S2 AND S3 AND S4 AND S5 

where S1 through S5 represent test state conditions defined 
as: 



51 = Test hours >2b per 3000 lines of code 

52 = Errors per 1000 lines of code in range of 0.5 to 10 

53 = Rate of error detection decreasing for two weeks 

54 = No serious errors found in last week of testing 

55 = Field trial hours >"-2 total in-house test hours. 
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CORRECTION 

In lhe February 1986 'Ssue the shaOed ares in Fig 3 or page 12 was shown 
ncorraeBy The Carres figure is shown below 
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P-PODS: A Software Graphical Design Tool 

P-PODS enforces formal software design, allows designs 
to be maintained on-line, and produces output suitable for 
design walkthroughs. 

by Robert W. Dea and Vincent J. D'Angelo 



P-PODS [Pictorial Procedure Oriented Design Sys- 
tem) is an interactive graphical software design and 
documentation tool. Available for internal Hewlett- 
Packard users only, its target users are software R&D en- 
gineers. As a design tool, P-PODS is used during the design 
phase ui a project to replace the pseudocoding or flowchart- 
ing of detailed logic structure that would normally be done. 
The resulting diagrams supplement information available 
in the finished code, As a documentation tool, P-PODS is 
used to document existing code. 

With P-PODS. an engineer interactively creates a design 
diagram, These diagrams are kept on-line and are easily 
changed. Hard -copy output of these diagrams can be pro- 
duced for formal design reviews or for internal mainte- 
nance purposes. Once the designs for the project have been 
finalized, code templates can be generated to assist the 
software engineer with the start of the coding phase. 

The design phase is a critical point for eliminating de- 
fects. Finding and correcting defects in the design phase 
results in a much lower cost compared to finding and cor- 
recting them during the testing phase. Finding elements of 
complex design at an early point leads to better program 
structure and reduced long-term maintenance costs. 

P-PODS is a prototype product to address some of these 
issues. It was created partly to obtain feedback for future 
design tools. This feedback is being incorporated into fu- 
ture R&D efforts in the Software Engineering Laboratory of 
HP's Corporate Engineering Department. 

Phased Release 

Originally. P-PODS was intended to be a design tool that 
had the following features: 

■ Hierarchical graphical editor (to create charts similar to 
the one shown in Fig. 4], 

■ Logic structure graphical editor 
• Ability to handle data variables 

■ Partial code generation 



PROCEDURE: 



count _options 



Counts students in CS 



WHILE student records remain to process 



retrieve student record 



IF computer science major 



THEN 



CASE CS option 



systems 



add 1 to systems count 



math 



add 1 to math count 



applications 



add 1 to application count 



ELSE 



add 1 to non-CS count 



Fig, 2. Example of a P-PODS design equivalent to Fig. 1 . 

■ Code scanners to bring existing code into the design 
system 

■ Limited design analysis. 

■ Calculation of complexity metrics. 

It was decided that a phased release approach was appro- 
priate to gel important user feedback. The project was par- 
titioned into six phases. The first phase developed the logic 
structure graphical editor on the HP 3000 Computer. This 
was the minimum core subset of functionality. The second 
phase enhanced this version, adding partial code genera- 
tion capability. The third phase was a port of the phase 
two release to the HP-UX operating system, with automatic 
calculation of design complexity. The proposed fourth 
through sixth phases were to add the remaining features 
(the hierarchical editor, etc.) to the HP-UX version. 



student records remain to process 




retrieve student record 


~~~— — ■ — -______^ computer science major? — — ' 


^s. ca*e CS option 
systems'X^ ^^--"math 


applications 


add 1 to non-CS count 


add 1 to 

systems 
count 


add 1 to 
math 
count 


add 1 to 

application 
count 



Fig. 1. A Nassl-Shneiderman de- 
sign example. 
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P-PODS Development Terminals 




Shared Data Base 



Output Devices 



Fig. 3. rreP-PODS'3000 environ- 
ment 



P-PODS Diagrams and Features 

P-PODS provides an interactive tool for structured flow- 
charting. The design diagrams created are combinations of 
individual design constructs. These design constructs are 
similar to Nassi-Shneiderman structure flowcharting con- 
structs. 1 An example of a Nassi-Shneiderman diagram is 
shown in Fig. 1. 

Although P-PODS design constructs are based on the 
Nassi-Shneiderman representations, alterations were made 
to avoid the subdividing of the diagram into narrow vertical 
columns for decision representations. These alterations 
allow the terminal's screen space to be used more effec- 
tively. Fig. 2 shows the P-PODS equivalent of the example 
shown in Fig. 1. 

P-PODS provides the following structured design con- 
structs: SIMPLE, WHILE, FOR, PROCEDURE CALL, IF. ELSE, CASE, 
CASE ELEMENT, DO UNTIL. 

P-PODS prevents the user from producing incorrect de- 
sign structures. It rejects any attempt to combine sequences 
of incompatible structures. For example, the user would 
not be allowed to add a second ELSE construct to an IF 
construct, 

Multiuser Environment 

P-PODS is designed to be used by a project team. Each 







Fig. 4. Example of a Jackson diagram 



project member's designs are stored in a single shared P- 
PODS data base containing all of the designs for the whole 
project. Each person on the team can interrogate the data 
base at any time to view its contents. Fig. 3 shows the 
P-PODS environment on the HP 3000 Computer. 

The current underlying design data base is an Image data 
base, and all Image-related support tools are available for 
maintaining it. 

In P-PODS. designs within a project are partitioned into 
subgroups called modules. Modules are logical groupings 
of P-PODS design diagrams. For example, a project team 
might decide to define a module to contain graphics related 
routines, while another module might contain user inter- 
face related routines, and so on. A module in P-PODS is a 
tockabln entity, preventing two project members from 
changing the same design at the same time. 

P-PODS can translate its designs into either Pascal or C 
code templates. The user can then edit the generated file 
with any favorite editor to fill in the missing pieces. This 
feature relieves the user of the need to match BEGIN/ENDs, 
etc. P-PODS also translates the design construct descrip- 
tions into comments, and places these comments in the 
appropriate places in the generated code template. 
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IF 
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THEN 
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EL 


SE 
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Fig. 5. Example o! P-PODS constructs to represent hierarchi- 
cal structure, equivalent to Fig 4 
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Several copies of P-PODS/3000 and P-PODS/UX have 
been distributed to software engineers in the company. 
Feedback has indicated that users would like design tools 
containing interactive hierarchical and data flm\ diagram- 
mixtg capabilities. Future design tools also need to be im- 
plemented on workstations to overcome any performance 
problems caused by host-to-terminal communications. 
Also, some users prefer an enhanced editor to a lower-level 
design tool. 

Future Uses for P-PODS-Type Diagrams 

P-PODS design constructs can also be used to represent 
hierarchical structures. These constructs can show program 
modules and their interrelationships. A program is rep- 
resented as a hierarchically ordered set of modules. The 
modules that perform the higher-level functions are closer 
In the left margin. Lower-level modules are indented, and 
are lower in the diagram than their parent modules. 

For example, the Jackson diagram 2 shown in Fig. 4 has 
the equivalent representation using P-PODS-type con- 
structs shown in Fig. 5. 

P-PODS-typr- rji'si^n r (instructs can also be used to rep- 
resent hierarchical data structures. This representation 
shows a program-level view of the data. For example, a 
Warnier-Orr diagram 11 is shown in Fig. 6. and its equivalent 
P-PODS-type representation is shown in Fig. 7. 

Using the hierarchical data structure and detailed design 
representations discussed so far, a method of design can 
be derived that integrates these design techniques. Software 
engineers can use any subset or all three of these design 
representations in designing software. For example, the 
software can first be designed in a hierarchical manner. 
From there, detailed design can be performed for any of 
the components in the hierarchical design. As the detailed 
design is progressing, data structures can be defined using 
the data structure representation. This type of environment 
is shown in Fig. 8. A transfer from one design representa- 
tion to another exits back along the same path from which 
it was invoked. In this way, three different kinds of design 
representations using P-PODS-type constructs can be used 
in the design of software. 
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Fig. 7. Example of P-PODS constructs to represent data 
structure, equivalent fo Fig 6. 

Conclusion 

The design phase is a critical point of a project for pre- 
venting defects. Defects introduced during design increase 
development costs, extend development schedules, and 
frequently create large maintenance costs. The techniques 
available through P-PODS and olher tools currently under 
exploration deal with some of the primary causes of defects, 
and will lead to better software products. 
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Triggers: A Software Testing Tool 

Triggers as a software testing method focuses on testing 
the boundary conditions of the software, and enables the 
software tester to be more productive. 

by John R. Bugarin 



SOFTWARE TESTING is in the eyes of the world a 
black art. This art contributes to the quality of the 
software product and consumes a large amount of 
effort in the software development life cycle. 

Triggers is a software testing method to increase the pro- 
ductivity (efficiency and effectiveness) of testing. It allows 
the tester to force the execution of specific paths in the 
software by setting specific software conditions. 

Software projects consist of several different partitions 
called modules. Consider the number of execution paths 
between these modules. If we assume ten modules, each 
having only one interface, then there are potentially 72 
different intermodule entry point paths. However, this 
number includes only the number of module entry point 
pairs, it does not include different combinations of module 
entry point sequences. In most software projects, the 
number of different combinations is quite large. 

How can the writer of module X test X's interfaces with 
modules A, B. C, and D? How can the writer of module X 
increase the testing branch flow coverage of X? Triggers Is 
the answer. 

This method can easily be implemented in most develop- 
ment languages. However. I will not address implementa- 
tion here. Like all methods, Triggers is better explained 
through an example, and I will use the language MODCAL 
for the Triggers example that follows. 

MODCAL Example 

This Triggers implementation is based on the exception 
handling [try/recover and escape] mechanism of MOD- 
CAL. The grammar of the MODCAL TRY-RECOVER and ES- 
CAPE statements is: 

(statement; ::- TRY (statement list) RECOVER 'statement' 
::= ESCAPE ( (expression; ) 

The ESCAPE statement's expression is integer-valued. If 
during the execution of the (statement list) in the TRY/RECOVER 
statement an ESCAPE statement is executed, the program 
will continue execution at the (statement; following the RE- 



COVER. Hence, several levels of procedure calls could po- 
tentially be aborted. Consider the following example: 

PROCEDURE X: 
BEGIN 



statement 1: 
statement 2: 
statement 3: 
statement 4: 



TRY 

Y; 
RECOVER 

WRITELN( "BINGO 1 '); 
WRITELIMCBANGO'' ): 



END;(*X-) 

PROCEDURE Y: 
BEGIN 
statement I : Z; 

END;(*Y*) 

PROCEDURE Z: 
BEGIN 
statement 1: IF ((an error condition;) THEN 
statement 2: ESC APE ((the error condition)); 

END;(*Z-) 

Upon entry ol procedure X. the TRY/RECOVER statement 
is entered (statement 1 of X|. Procedure Y is called and 
immediately procedure Z is called. At statement 1 in pro- 
cedure Zan error condition is encountered and an ESCAPE 
Statement is executed (statement 2 of Z], The run-time sys- 
tem then searches for the innermost TRY RECOVER state- 
ment (procedure X in this example) and executes the re- 
cover statement (statement 4 of X). "BINGO!" is printed. 
Execution continues after the TRY RECOVER statement and 
"BANCO!" is printed. 

The above example is simplified because no recursion 
hi the try'Recover statement exists and no escape state- 
ments are executed in the recover statement. Both TRY/RE- 
COVER and ESCAPE recursion are supported in MODCAL, 
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Using the example on the preceding page, add a compiler 
directive and a new procedure call Try_Trigger at the begin- 
ning of procedure Z: 

PROCEDURE Z, 
BEGIN 

StFTRIGGER.ONS 
Try_Trigger(...); 
SENDS 

IF ((an error condition}) THEN 
ESCAPE ((.the error condition)] : 

END;(*Z.) 



statement 1: 
statement 2: 



Upon entry of Z, Try.Trigger is called. It queries a trigger 
database. If an entry is found, Try.Trigger executes an ESCAPE 
statement with the designated escape value. Otherwise, 
Try.Trigger is a NO OP. With this mechanism a condition is 
triggered; hence the name Triggers. 

An instance of a trigger consists of two search keys (a 
module name and a trigger number), a reference count 
which is decremented when the trigger is called by Try.Trig- 
ger, and an escape value which is used when the reference 
count is equal to or less than zero. 

All interfaces between modules in the project can be 
identified and assigned trigger numbers which can made 
public in a MODCAL definition file. These numbers are 
negative values to allow individual testers to use positive 
numbers for their own triggers. At every interface, the trig- 
ger is placed as follows; 

PROCEDURE XXX(...); 
BEGIN 

SIFTRIGGER.ONS 

Try .Trigger ( My.Modname, T.XXX); 
Try.Trigger ( ANYBODY, T.XXX ); 
SENDS 

END; (* PROCEDURE XXX*) 

My.Modname is a function lhal returns the identifier of the 
current module and T_XXX is a constant ANYBODY is a con- 
stant modname that denotes any module. The first Try.Trig- 
ger call provides a testing interface. Any module can use 
this interface to test specific interfaces to procedure XXX. 
The second Try.Trigger call provides the ability to test the 
general interface to procedure XXX. 

With triggers in place at every interface, the writer of 
module X can lest the interfaces to all client modules. The 
module writer identifies the sequence of intermodule in- 
teractions that need to be tested and uses triggers to force 
the chosen execution paths. This same concept can be 
applied to the internal interfaces of the module (intramod- 
ule). Furthermore, triggers can be used to increase branch' 
path flow coverage. 

The implementation of Triggers consists of the data base 
(with insertion and deletion operations) of records consist- 
ing of the two keys (module name and trigger number), the 
reference count, and the escape value. Interactive and pro- 
grammatic interfaces for inserting and deleting triggers in 
the data base should be Implemented. 



Triggers can be applied to several other testing needs by 
using the general model below: 

SIFTRIGGER.ONS 
TRY 

Try.Trigger (My.Modname. TRIGGER.NUMBER); 
RECOVER 

I special software! 
SENDS 

If Try.Trigger escapes, the special software will be exe- 
cuted. Otherwise, the code is equivalent to a NO OP. This 
model can be applied to test module interfaces that consist 
of more than just escapes by executing special software to 
trigger the software condition needed. 

Problems 

This trigger example exposes several problems. The Try. 
Trigger procedure calls are manually identified and inserted 
into the software. Hence, identifying and inserting all the 
triggers required is a painful process. The module name 
concept needs to be implemented across the total software 
system. Resolution of a trigger in this example is at the 
module level and not at the process level. Hence, only one 
trigger test per module can be executing at a time. 

Triggers Experience 

The key question is "How productive (efficient/effective) 
is Triggers?" We have used this MODCAL version of Trig- 
gers on a project of 15 modules written by 12 engineers. 
We asked the engineers what percentage of defects found 
were found using Triggers and their answers ranged from 
40 to 80%. Our personal experience was around 95%, prob- 
ably because of our intimate knowledge of Triggers. During 
the last month before manufacturing release, 31 major de- 
fects were found in the first week using specific and general 
triggers (an investment of one engineer week). 

Even without quantitative data, our organization has ac- 
cepted Triggers as an effective testing tool to be used on 
future projects. 
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Hierarchy Chart Language Aids Software 
Development 

HCL is used by software designers at several Hewlett- 
Packard Divisions to speed up the process of generating 
hierarchy charts. 

by Bruce A. Thompson and David J. Ellis 



TODAY. SOFTWARE DESIGNERS are using struc- 
tured methods that organize the development pro- 
cess from specification through final code into a 
sequence of steps. The end of each step is marked by the 
creation of part of the overall documentation. This docu- 
mentation greatly facilitates communication between de- 
signers and improves the maintainability of the product. 
One of these pieces of documentation is a hierarchy chart, 
which is a graphical representation of the structure of the 
software. It depicts the organization of the modules. [A 
module is a simple procedure, function, subroutine, or 
similar atomic piece of code.) With this chart, engineers 
can analyze the proposed design with a view to making 
improvements. 

A hierarchy chart allows careful examination of the pro- 
gram's binding and coupling before code is written. Bind- 
ing is a measure of the functionality of a module. At the 
top of the binding scale are modules that do one and only 
one task, while modules made of random blocks of code 
are at the bottom of the scale. Coupling is a measure of Ihe 
traffic between modules. A module that modifies the code 
of another has high coupling, whereas two modules that 



pass little or no data have low coupling. A further discus- 
sion of coupling and binding can be found in references 
1. 2, and 3. 

This is where the designer can make the best effort to- 
wards ensuring program modularity and future reusability. 
A program that is designed w r ith high binding and low 
coupling will be much easier to modify or repair. It will 
also be much easier to reuse modules designed in this way. 

Before this analysis can be performed, however, the chart 
must be drawn. 

Problems with Existing Methods 

Traditionally, the software engineer draws hierarchy 
charts in one of two ways: by band or with a generic 
graphics editor. There are problems with both methods. 
Charts drawn by hand vary widely in style and are very 
time-consuming to produce, General-purpose graphics 
editors, although powerful, can be difficult to learn and 
use, What these editors lack is the specific knowledge of 
hierarchy i harts needed so that changes can be made 
quickly and easily. Both methods continually confront the 
engineer with the topology problem — laying out the chart. 




Fig. 1. An example of a simple 

hierarchy chart showing the differ- 
ent types of modules main pro- 
Gram.b.c.d.e.f, and h (no! called) 
are modules G is a system mod- 
ule I Is an external module- J is a 
hardware module K is a dala mod- 
ule Lisa recursive module Mod- 
ule names can be up to 32 charac- 
ters long HCL draws each module 
name on up to 3 lines within a sym- 
bol 
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As the number of modules on the chart increases, there 
is an exponent in I increase in the difficulty of this problem. 
The engineer rrmsl place the modules to make the chart 
clear and understandable. Even minor modifications to the 
chart can require starting over and redrawing the chart. 
The time required for redrawing charts can make the de- 
signers feel that they are spending more time drawing 
charts than designing, and tends to make the designers 
reluctant to make modifications. This reluctance has often 
caused designers to defend their original designs rather 
than admit that they could be improved. 

The solution to these problems is a graphics program, 
aimed specifically at generating hierarchy charts, that re- 
quires little time to learn or operate. The Hierarchy Chart 
Language (HCL) program is primarily a software engineer- 
ing tool used within several HP Divisions. It was developed 
to facil itate the use of structured software design . HCL grew 
out of the need to generate hierarchy charts quickly and 
easily so the designers could concentrate on the design 
rather than the representation of software. HCL automati- 
cally places modules and routes interconnections. This is 
the most time-consuming aspect of chart generation for the 
engineer to do by hand. This 100% placement and routing 
is not restrictive, however. The designer is still allowed 
the flexibility to alter the appearance of the hierarchy chart 
to conform to a personal style. 

In designing HCL, there were two choices for the input: 
a text file or interactive graphics. The text file input was 
chosen, mainly because it could look like a block-struc- 
tured language, something that most software engineers are 
very familiar with. Also, if an engineer wants to make a 
hierarchy chart for an existing piece of code, it is easier to 
do if the input to HCL is text. To provide text input, the 
user does not have to learn yet another editor, but simply 
uses any familiar one. By building on the knowledge base 
the software engineer probably already has [i.e., text 



editors, block-structured languages, hierarchy charts], HCL 
requires the engineer to learn only its very simple syntax. 

Language Format 

The primary goal in specifying the hierarchy chart lan- 
guage was to minimize the information needed to draw a 
hierarchy chart. This can be summarized as a list of the 
modules that appear on the chart and how these modules 
fit together. This list is the basis for the overall language 
structure. 

The input is divided into three sections; options, decla- 
rations, and definitions. Mosl compilers of high-level lan- 
guages divide the input into similar sections, so again, this 
is something that the user is familiar with. 

The options section gives the engineer control over the 
appearance of the hierarchy chart. There are options to 
label the chart with a title, the author name[s), the date, 
and a legend or key. The user can disable certain features 
of HCL, such as the drawing of parameters and parameter 
checking. In addition, this section provides control over 
the operation of the program. 

Before a module can be used in the definition section, 
it must first be declared. This is similar to the type declar- 
ation of variables in many of the high-level languages. 
Types and modules can be declared in any order. 

HCL provides support for many different module types. 
Each type is drawn differently on the chart and has different 
uses. 

The first module type is I he simple module, which rep- 
resents common procedures, functions, subroutines, etc. 
The recursive module is used to represent modules that 
call themselves, either directly or indirectly. These mod- 
ules are generally more complex than the simple modules 
and are therefore shown differently. The external module 
is used to represent modules that are not defined on the 
chart. These modules may be defined on another chart, or 



HCL EXAMPLE 
MODULE C MADE A UTILITY 



MAIN PROGRAM 





Fig. 2. A hierarchy chart in which 
module C is drawn as a vHitty 
module. 
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may remain to be designed. An external module is one way 
to show possible enhancements to a program on thechart. 

The system module is used to represent operating system 
calls, such as modules that read the system clock or open 
a file. The data module was devised to show access to data 
such as variables, data bases, files, etc. During design, it is 
important to show which modules access the data so that 
the interactions (coupling) of that data can be minimized. 

The hardware module was added specifically to show 
software interfaces to hardware registers. This allows the 
assessment of coupling of not only the software-sol 
interface but the hardware-software interface as well. A 
hardware module looks like the integrated circuit represen- 
tation used on schematic diagrams by digital designers. 
Hardware interactions with software are especially impor- 
tant in microprocessor-based control software. 

The invisible module is shown by simply drawing the 
name of the module. This module can be used as a generic 
module type, making HCL useful for applications other 
than software hierarchy charts. Fig. 1 is an example of a 
simple chart showing the various module types. 

The limit on the length of a module name is 32 characters. 
A name can contain nearly any printable character. To 
make the module names easier to read. HCL draws the 
name on up to three lines within the module shape. The 
undcrbar character is used as a place for HCL to divide the 
name into multiple lines if the name is too long. The under- 
bars are not drawn on the churl. 

The definition section is where the structure of the hierar- 
chy chart is specified. Modules are defined to call other 
modules by listing subordinate modules in a Pascal-like 
begin-end block. Parameters can be included each time a 
module is used. These parameters are divided into two 
types: those passed to a module and those returned from 
the module. When using a module more than once, the 
number of to and from parameters must be the same. How- 
ever, the parameter names do not have to match. Nearly 
all printable characters can be used as parameters. This 
allows the user to customize representations for the param- 
eters such as separating control and data parameters, for 



example, the data parameters might be contained in brack- 
ets and the control parameters simply listed. 

Conditional calls, case statements, and looping con- 
structs are supported. Each of these can have a begin-end 
block to represent that more than one mndule is affected. 

Nesting of loops can be done to show nested iterations 
on the hierarchy chart. However, trying to nest case or 
conditional calls will result in an error. This 
there is nt i ;o show this type of nesting on a chart. 

The following code is the very simple textual definition 
that produced the chart shown in Fig. 1. 

MODULE MAIN PROGRAM. B.C.D.E.F.H. 
SYSTEM G: 

EXTERNAL I 
HARDWARE :. 
DATA K; 
RECURSIVE L; 
MAIN PROGRAM 
BEGIN 

B(TO_PARM); 
C 
BEGIN 
D 

BEGIN 
I; 
J: 

END: 
E; 

END: 
F(.'FROM_PARM); 
•LOOP 
BEGIN 
G; 
K; 

END; 
•COND L(TO_PARM,'FROM_PARM|; 
END: 

A problem arises in drawing a chart when a module is 



EXAMPLE OF INTERCONNECT MODULE USAGE 
MODULE A CALLS 25 OTHER MODULES 




Fig. 3. An example of the use of 
the interconnect module Module 
A calls 25 other modules, HCL al- 
lows up to 512 modules per sheet 
ol paper. Programs (hat have 
more than 512 modules can be 
drawn on two or more sheets 
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cal ted more than once. One approach is to use a circle with 
B unique letter inside, Whenever the module is called, it 
is replaced with its corresponding letter in a circle. The 
module is then drawn off by itself with any module calls 
i! makes drawn underneath. 

For a large chart it can become difficult to remember 
which letter, represents which module. Another approach 
is to draw the module near the bottom of the paper and 
draw lines In this module for every call. This results in a 
chart of many lines and few modules. 

When HCL detects a module's being called more than 
once, it replaces the call with a circle but inserts the actual 
name of the module in the circle. The circle is called a 
utility module. The module is then drawn by itself as a 
subchart along with any modules H may call. In this way, 
the structure can be understood easily and the problem of 
many lines bisecting the drawing is avoided. The following 
code provides an example. 

MODULE MAIN PROGRAM,B,C,D,E,F,H; 
SYSTEM G; 
EXTERNAL I; 
HARDWARE J; 
DATA K: 
RECURSIVE L: 
MAIM PROGRAM 
BEGIN 

B(TO_PARM); 
C 
BEGIN 
D 

BEGIN 
I; 

J; 

END: 

E. 
END; 

F(/FROM_PARM); 
•LOOP 

BEGIN 

G; 

K; 

END; 
'COND L(TO_PARM-'FROM_PARM). 
END; 

C: (MAKES MODULE C A UTILITY} 

Fig. 2 shows the chart produced by this code. In this 
example module C was made a utility module by listing it 
again at the end of the file as shown. Module C is then 
drawn separately as a subchart. 

One problem that can occur when defining a hierarchy 
chart is a module thai eventually calls itself. This is known 
as recursion. Sometimes this is desirable, but it can he 
disastrous if unintentional. There are two types of recursion 
that HCL checks for, direct and indirect. Direct recursion 
is a module calling itself from itself. Indirect recursion is 
a module calling itself through intermediate modules. Indi- 
rect recursion is the most difficult type of recursion to 
detect manually. 



When either type of recursion is identified and the mod- 
ule has not been previously declared a recursive type, a 
warning is generated and the module type is changed to 
recursive. 

It is often necessary In define separate subcharts on a 
single drawing. This is useful for showing functional par- 
titioning of the design as well as concurrent processing. 
The user may achieve this effect by simply including the 
definitions of these charts separately, one after another in 
the file. HCL will draw each as a separate subchart on the 
drawing, 

A common nuisance in many block-structyred languages 
is the requirement thai a symbol he completely defined 
before il is used. In Pascal a procedure name must be fully 
coded before it can be called. HCL allows a module to be 
called anywhere in the file without reference to where the 
module is defined. This permits easy reordering of the text 
within the file. 

A common cause of problems for hierarchy charts is a 
module that calls a sequence of many modules. HCL will 
draw the module calls all on the same level, creating a very 
wide and short chart. The interconnect module can he used 
Id draw some of these modules at a lower level on the chart 
and stilt maintain the structure, The interconnect module 
was added to allow the user to make the chart easier to 
read; it is ignored when the cross references are generated. 
The following code and the resulting chart (Fig. 3) show 
an example of the use of the interconnect module. 

•TITLE EXAMPLE OF INTERCONNECT MODULE USAGE'; 
■NAME MODULE A CALLS 25 OTHER MODULES'; 
"MODULE.DEFAULT; 
•NO_WARNING; 

INTERCONNECT LINK1 ,LINK2.LINK3,UNK4: 
A 
BEGIN 
B: 

'-■ 
D 
E; 

LINK4 
BEGIN 
LINK1 
BEGIN 

F; 

G; 

H; 

I; 

END; 

J: 

K; 

L; 

M; 

LINK2 

BEGIN 

N; 

O; 

P; 

Q; 
END; 
END: 
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S: 
T: 
U; 

LINK3 
BEGIN 

V: 

W; 

X: 

Y; 

END: 
Z. 
END; 



The Topological Problem 

The real power of HCL is its abilily to draw any chart 
specified by the language automatically. The user does not 
have to perform any graphical operations to generate a 
chart. The process HCL uses to draw a chart from the text 
supplied consists of three steps. 

The first step is to make a first-pass computation of the 
chart. Thisstepmakesa rough estimate on how the modules 
should be placed. It does not try to put the boxes as close 
together as possible nor does it attempt to center the boxes. 
It does, however, place the boxes and circles so that they 
do nut overlap and the associated parameters do not cross. 

1 In' second slt!|). i onijiiii ting, takes ill the subi harts and 
moves the boxes and circles as close together as possible. 
Each module is centered above those that it calls to make 
the chart look better. 

The third step is to take all of the subcharts and organize 
them to fit a specific paper size. All of the subcharts are 
arranged in one long row, which is then chopped into 
pieces and the pieces arranged to fit the length-width ratio 
of the paper. The number of subcharts in each row depends 
upon the size of the subcharts. The subcharts are ordered 
from left to right and top to bottom, starting with the sub- 
chart first defined in the input text. The nnlrr Hn'ii follows 
the sequence of the modules in the input text. Any Utility 
modules are located after alt the subcharts. 

After this three-step process is performed, the chart is 
ready to be drawn. However, this does not limit modifying 
the arrangement of the chart. There are several ways to 
change the appearance of the chart. One method is to 
change the order of the subcharts in the Input file. This 
will change the order of the subcharts on the drawing. An 
alternative method is to draw just a portion of the input 
text on the drawing. This technique relies on the fact that 
comments can be nested in HCL. To draw just some of the 
modules contained in the input text, the engineer includes 
the modules that won't he shown in comments. HCL will 
ignore the module definitions contained in comments. 

A third method is to "pull apart" modules. One problem 
that can occur with large charts is that some of the subcharts 
may bo large compared to other modules. The larger sub- 
charts can be divided into multiple subcharts to provide a 
better looking drawing. This is done by making a module 
i iilleil within the larger subchart .1 utility module. A mod- 
ule can he made .1 utility module simply by listing 11 more 
than once in the input text. 



Additional Output from HCL 

There axe several features of HCL that general-purpose 
graphics editors do not provide. These outputs are intended 
to help the engineer during the design of the software. 

The module call count gives an alphabetic listing of ail 
the declared modules, their types, and the number of 
each is called. If a module is declared but never called, it 
is flagged to bring it to the attention of the engineer, who 
may have forgotten to use the module after declaring it. At 
the end of the listing is the total count for each type of 
module as well as the total numbei ai modules de< tared 
This output can be used to find the critical modules that 
are called often in the designed software. This output may 
also be used in the collection of certain software metrics. 

The following is an example of a module call count table. 

Module Call Count Table 

A (M) called 1 time. 

B (M) called 1 time. 

C (M) called 1 time. 

D (M) called 1 time. 

E (M) called 1 time. 

F {S) called 3 times. 

Z (R) ******Not called****** 

Module {M) 5 

System {S> 1 

Recursive (R) 1 

Total Modules Declared = 7 

HCL produces two types of cross reference outputs. The 
first is an alphabetic listing ul all Hie mutinies and the 
modules they call (see example below]. Included with this 
are the parameters that are used in each call, which is 
especially helpful if the parameters on the chart become 
too small to read. 



Module Call Cross Reference 
Module Calls Modules 



A 


B(VAR1.VAR2) 
C 

D(.'VAR3) 

E 


B 


F 


C 




D 


F 


E 


F 


F 




Z 





Number of modules declared 
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The second cross reference, shown below, is the reverse 
ol the first one. It is also alphabetical, but. shows all the 
modules that call a given module. This comes in handy 
when the designer wishes to change the interface of a mod- 
ule and needs to know which other moduli's will be af- 
fected. 



Module Called by Cross Reference 

Module Called by Modules 



A 




B 


A 


C 


A 


D 


A 


E 


A 


F 


B, D, E 


2 




Number of modules declared = 7 



Uses of HCL 

Although HCL was designed as a software engineering 
tool, it is not restricted to this use. Other uses include: 

■ File system map. A hierarchical file system such as MS-- 
DOS or the HP-UX operating system can be represented. 

■ Management organization chart. A company organiza- 
tion chart can easily be created and maintained. 

■ Process mapping. A process can be decomposed and 
documented easily with HCL. 

Other uses include specifying data structure composi- 
tion, documenting a command tree, and depicting Modula- 



2 interdependencies. Basically, any hierarchically or- 
ganized structure can be documented using HCL. 

Conclusion 

HCL has been used successfully on a variety of software 
products within HP. These projects have ranged from real- 
time microprocessor-based assembly language to the HCL 
program itself. Two such projects were described In the 
March 1985 issue of the HP /ourna J— the HP 7978A and 
HP 9144A Tape Drives." 1 HCL was indispensable in the 
execution and management of these projects. 

IICL has proved to be very easy to learn. An engineer 
who is familar with the text editor can be productively 
generating hierarchy charts in less than a half a day. HCL 
has vastly decreased the nonproductive tasks associated 
wilh hierarchy charts, freeing the engineer to concentrate 
on software design, 

While HCL can be ordered inside of HP, it is an internal 
tool and is not, at this time, available for customer sales. 
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Module Adds Data Logging Capabilities to 
the HP-71B Computer 

This 64K-byte plug-in ROM otters new BASIC language 
keywords for control of a battery-powered data acquisition 
and control unit and nine application programs for data 
capture, presentation, and transmission to host computers 

by James A. Donnelly 



THE COMBINATION OF THE HANDHELD HP-71B 
Computer 1 and the HP 3421 A Data Acquisition/Gm- 
tral Unit 2 provides a low-cost hardware configura- 
tion for many engineering or production data acquisition 
applications (Fig. 1). The computer and instrument are 
connected via the Hewlett-Packard Interface Loop (HP-IL). 3 
To assist the engineer in performing data acquisition tasks, 
a special plug-in ROM module was developed for the HP- 
71B Computer. This 64K-byte ROM module, the HP 82479A 
Data Acquisition Pac, contains a hybrid of BASIC and as- 
sembly language programs. Six general sets of capabilities 
are provided: 

■ BASIC kevwords for instrument control. The keyword 
INIT3421 finds and initializes the specified HP 3421 A on 
the Interface loop. Keywords such as DCvOLTSand range 
provide convenient instrument control. Additional 
keywords such as TCOUPLE and RTD provide rapid and 



accurate assembly language linearizations for ther- 
mocouple, thermistor, and resistance-temperature detec- 
tor (RTD) probes. 

Interactive control of the HP 3421A. A BASIC program 
and keyboard overlay for the HP-71B create a virtual 
front panel for the HP 3421A. which has no front-panel 
controls. 

Nine-trace stripchart output for the HP Thinkjet Printer. 4 
A BASIC program configures the system to produce strip 
charts with optional data storage. 
System monitoring and control. A BASIC program con- 
figures the system to monitor functions in a system, per- 
form limit tests and controls, and display the system 
status on a video interface. An option allows periodic 
storage of the system status to a data file. 
Long-lerm data acquisition and control. Two BASIC pro- 
grams allow sophisticated data logging and control pro- 




Fig. 1. The HP 82479 A Data Ac- 
quisition Pac lor the HP-71B Com- 
puter enables the computet to 
control the HP 3421 A Data Acqui- 

sitioniControl Unit via the Hewlett- 
Packard Interface Loop, allowing 
an engineer to configure low -cost, 
batter/ -powered systems for data 
logging or instrument control 
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cedures to be configured and executed without user in- 
tervention 
■ Data analysis. A BASIC program provides printed 
analysis of data collected by the stripchart. system 
monitor, or logging programs. The data can be printed, 
summary statistics can be calculated, or a strip chart can 
be generated from stored data. Two additional programs 
provide data transmission to MS '"-DOS-based comput- 
ers (via HPLink) or to HP 9000 Series 200 and Series 
300 Computers. 

New BASIC Keywords 

The Data Acquisition Pac's capabilities are based on a 
series of BASIC language keywords that combine conven- 
tional instrument control steps into one action. The con- 
ventional procedure for reading an instrument in HP BASIC 
languages has been to use the OUTPUT statement to send a 
command sequence to the instrument and then use an 
ENTER statement to receive the data from the instrument. 
The keywords provided in the HP 824 79 A ROM combine 
these operations into one, which provides several benefits: 

■ Ease of programming: the engineer is no longer required 
to refer to the instrument manual for cryptic commands. 
For example, A = DCVOLTS replaces OUTPUT :6;"F1T2"@ 
ENTER :6:A 

■ Enhanced code maintainability: an engineer assigned to 
take over responsibility for a test program using these 
keywords will experience a shortened learning curve 
while reviewing the code. 

■ Speed enhancement: the combined operations reduce 
operating system overhead For the processing of the OUT- 
PUT and ENTER statements. The keywords TCOUPLE. 
THMST2, and RTD provide rapid and more accurate con- 
versions from voltage or resistance measurements than 
equivalent routines written in BASIC. 

■ Device location independence: unlike the HP-IB (IEEE 
488), where the addresses of the instruments must be 
set manually, the HP-IL assigns device addresses au- 
tomatically. The keywords in the Data Acquisition Pac 
complement this by not requiring instrument address 
information. If more than one HP 3421A is connected 
to the HP-IL, a consistent device addressing scheme 
makes selection of the first instrument on the loop the 
default choice, but permits selection of additional HP 
342lAs. 

The new keywords provided by the ROM do not preclude 
the use of ENTER and OUTPUT statements to control the HP 
3421A, creating a possible conflict between commands is- 
sued through the new keywords and commands sent with 
the OUTPUT statement. This potential for conflict is virtually 
eliminated by assigning priority to the commands made 
with the new keywords and keeping track of the intended 
state of the HP 3421 A in an internal buffer in the HP-71B. 
The buffer records the current settings for: 

■ The HP 3421A device specifier (address) 

■ The degree mode for temperature conversions (C, F. K. 
orR] 

■ The gate time for the counter (0.1, 1, or 10 seconds) 

■ The number of digits of resolution (3. 4, or 5) 

■ The range ( - 1 through 7) 

* The autozero status (on or off) 



■ The autorange status (on or off). 

The entire instrument buffer is sent to the HP 3421A 
before a new reading is taken, ensuring that the instrument 
will be in the correct state. This way the settings requested 
by the new keywords in the Data Acquisition Pac will be 
enforced even if all the instrument settings have been al- 
tered by an OUTPUT statement in another program. 

The HP 3421A can be ordered with various optional 
plug-in cards, depending on the needs of an application. 
This means that some commands will be correct forspecif ic 
configurations, but incorrect for others. To facilitate rapid 
error detection, the instrument status is checked after each 
command is sent, so that problems such as invalid channel 
requests or ranges can be delected immediately. This saves 
another check uiat would need to be done from a BASIC 
program using ENTER and OUTPUT statements to talk to the 
HP 3421A, 

The keywords provided for conversions from voltage or 
resistance to temperature are based on curve fits originally 
written in BASIC for a desktop computer. The BASIC 
routines provided accurate results, but with a significant 
speed penalty. These routines were rewritten in assembly 
language, providing a 20-to-l speed improvement while 
minimizing the effect of round-off errors by using lS-digit 
internal math routines. 

To complement the calculator-like friendliness of the 
HP-71B operating system, temperature unit conversion 
routines are built into the keywords. The HP-71B has a 
variety of system settings, such as OPTION BASE for array 
declarations and OPTION ANGLE for trigonometric functions. 
The OPTION statement was extended to include OPTION DE- 
GREES unit. The available temperature units are Celsius, 
Fahrenheit, Kelvin, and Rankine. By declaring OPTION DE- 
GREES C, the programmer specifies that the results of future 
temperature conversions will return Celsius degrees. 

Binary Subprogram 

A binary subprogram called SCAN was written to comple- 
ment the 30-reading data buffer in the HP 3421A. This 
subprogram provides significant performance enhance- 
ments by replacing the entire command sequence and loop 
structure normally used in BASIC for a burst measurement 
into a single binary subprogram call. The subprogram re- 
quires a command string that specifies the measurement, 
a vector to retain the collected readings, an index that 
points into the vector to indicate the starting position for 
the readings, and an error parameter. 

BASIC Programs 

The BASIC programs are designed to take full advantage 
of the features in the HP-71B operating system, yet retain 
the friendly personality' of a calculator. To this end, the 
front panel and data logging programs are designed to work 
with or without peripheral devices such as printers or video 
interfaces. The user interfaces of the various programs are 
designed to be consistent, so that an operator familiar U'ith 
one program will feel at home with another. Many complex 
operations requiring a number of commands on larger com- 
puters are reduced to a single keystroke. Error handling is 
designed to reduce the impact of simple entry mistakes or 
requests for impossible measurement or control functions. 
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System Monitor Example 



The combination 0* the HP-71B Handheld Computer the HP 
3421 A Data Acquisition Control Unit and the HP 82479A Data 
Acquisition Pac can be used to provide monitoring ana control 

-ispace-c" 
a large system simply may not fit The MONFTQR program can 
not only monitor a system but can also control the system using 
r ests Consider a production photographic laboratory with 
a controlied-temperature bath that " attained .-. 

one degree of 25°C Two type-T thermocouples are used to 
monitor the temperatures A room-temperature thermocouc e 
connected to channel 3 of the HP 3421 A and a bath-temperature 
thermocouple is connected to channe 4 The bath heate 
controlled by a relay which m turn is controlled by actuator 
channel of the HP 3421 A The HP-71B containing the HP 
824 79A plug-in ROM is connected lo the HP 3421 A and to an 
80-column video interface and video monitor as shown in Fig. 1 

In this example, the monitor program continuously displays 
Ihe room temperature and bath temperature on the video monitor 
In addition, two sets of limit lests are specified the control limits 
and the alarm limits The lower and upper control limits are set 
at 24 5 and 25 5 a C When the temperature tails below 24 5"C 



Setup 



PKOTOLAB TEMPERATURE MONITOR 



Dalefile: TESTDATAMAIN Time: 14:22 



1 Room Temp 21. 85 

2 Bath Temp 25.17 



1 X 

1 



Fig. 2. Video display tor system ol Fig 1 



the actuator channel is closed, turning on the heater by means 
of a relay When the temperature rises above 25 5°C. the actuator 
Channel is opened turning the heater off The lower and upper 
alarm limits are set at 24 and 26°C If the control system fails. 
one of the alarm limits will be reached and the HP-71 B will beep. 
Addit'onai alarm limit actions could log the event on a printer or 
control additional actuators 

Fig 2 illustrates the contents of the video monitor display while 
the photographic laboratory monitor is running. 




Fig. 1. Photographic laboratory 

temperature montlortng system 
with actuator control 



Wherever possible, the user's working environment is pre- 
served to protect the value of working variables, files, and 
other data. 

Unlike larger desktop computers, the HP-71B is designed 
to work under extremely low memory conditions while 
managing multiple data and program files in memory. 
Hence, the data togging program options are designed to 
work under low memory conditions. In the event of equip- 
ment failure, data is always preserved. The fil< J update 
procedures to external mass storage devices are designed 
to protect the integrity of the file at the slight cost of pro- 
cessing speed. An HP-IL failure during disc access risks at 
most one data scan, leaving the other records intact. The 
data analysis and transfer programs arc designed to accom- 
modate data files with partial data, such as data from an 
experiment llial terminated with an equipment Failure or 
upon receiving nil abort comuiiind from tin- operator. 

The BASIC programs in the HP 82479A Data Acquisition 
Put are described below: 

■ The FRONT program in conjunction with a keyboard over- 
lay redefines the HP-71 B keyboard, mapping the HP 
3421A functions to individual keys. Additional key redef- 
initions combine voltage or resistance measurements with 



temperature linearization functions lo provide complete 
temperature measurement functions. 
The STRIP program in conjunction willi an HP Thinkjel 
Printer produces up to nine traces on a 1% scale. The 
measurement function and scale are specified fur each 
trace. The scales for each trace are printed al the top of 
each page of output. Program uplions include measure- 
ment interval times and data storage options. 
Tl ,.- MONITOR program in conjunction with an HP-IL video 
interface provides a visual system monitor and control 
capability. Up lo 18 traces can be presented on ihe video 
display, A trace consists of a horizontal line on the display 
showing a label, an actual measurement, and a 32-point 
scale Indicating the position of the current measuremenl 
relative to specified nominal bounds. The display is de- 
signed so that the system operator can assess the state of 
the system al a glance, instead of having In interpret nu- 
merical readings one by one. Five limit tests can be applied 
to the measurement of each trace. If ;i test fails, one of six 
available limit actions can be taken. 

The SETUP program is used to define a data logging proce- 
dure, Up to 20 groups can be specified for a single data 
logging experiment. A group definition consists of the mea- 
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surement function specification, up to five limit tests, and 
data storage and timing specifications. The LOG program 
is used to execute the data logging setup. Options in the 
LOG program include buffered data storage and device 
power-down capability for extending the life of battery- 
powered peripherals. 

■ The REPORT program provides printouts of collected data, 
summary statistics about the data, and strip charts from 
collected data. These options can examine the entire file 
or a time segment within the file. 

■ The TRANSFER and MSDOSXFR programs are used tn move 
collected data to Series 200 and Series 300 Computers 
or MS-DOS-based computers such as the HP 150, The 
Portable, or the Vectra. Files transferred to the MS-DOS 
computers are compatible with 1-2-3™ from Lotus'", 

■ The STATUS program is used to read the status registers 
in the HP 3421A and produce a comprehensive report 
listing error conditions, option configurations, and the 
current operating status. 

■ The VERIFY program provides an interactive diagnostic 
procedure for verifying the proper operation of the HP 
3421 A. The program prompts for the installation of a 
diagnostic block on each option board installed, and 
checks for proper operation with the diagnostic circuits. 

Measurement Options 

Twenty-one measurement functions are offered among 
the three main data acquisition programs. These functions 
correspond to the main capabilities offered by the HP 
3421A combined with the temperature linearization 
keywords. The functions include do volts, ac volts, direct 
current, two- and four-wire resistance, frequency, six ther- 
mocouple types, 2-kfi and 5-kIl thermistors, RTD, digital 
bit, and digital byte, The programs provide two- and four- 
wire resistance measurement options for the thermistors 
and the RTD. 

Clearly, the BASIC programs cannot anticipate all possi- 
ble measurement applications involving the HP 3421 A. An 
additional function is included that permits the user to 
write a special BASIC subprogram to perform custom mea- 
surement procedures. This hook allows new measurement 
procedures to be created that still take advantage of the 
user interface and data storage facilities provided by the 
programs in the Data Acquisition Pac. 

In addition, each function can call a conversion program 
for additional processing of a measurement. For instance, 
there is no alternating current function in the HP 82479A 
ROM. A simple conversion program that divides an ac 
voltage by the shunt resistance can provide the equivalent 
of an alternating current function. 

Limit Tests 

The MONITOR and LOG programs can perform limit tests 
on data collected by each function. A simple negative feed- 
back loop can be created for temperature control by setting 
a limit test that turns on a heater if a temperature falls 
below a set level, or turns off the heater if the temperature 
rises above a certain level. Limit actions include a simple 
beep, the printing of a message, switching an actuator, en- 
abling or disabling another measurement group (in the case 
of the LOG program], or the calling of a user- written pro- 



gram. As mentioned before, the programs cannot anticipate 
all of the possible actions that might have to take place in 
the event of an out-of-limit condition. A hook that allows 
the user to write a custom limit action program provides 
significant flexibility in system design. 

Error Recovery 

Most of the peripherals that are available on the HP-IL 
are battery-powered and not subject to the misfortunes of 
ac power line interrupt ions Nevertheless, under some con- 
ditions a device may temporarily malfunction or cease to 
operate, causing an error to be detected by the HP-71B, In 
most instances, the execution of a RESTORElO command is 
sufficient to return the interface loop to working order. 
Clearly, in either production or unattended long-term data 
acquisition applications, some form of automatic error re- 
covery is desirable. Each of the programs in the Data Acqui- 
sition Pac calls a subprogram RECOVER when a loop prob- 
lem is encountered. The recovery subprogram Is sufficient 
to bring the system back to working order in many cases 
without operator intervention. Some system configurations 
may require different error recovery procedures ihan are 
provided. By placing a new RECOVER subprogram in the 
memory of die HP-71B, the user can effectively replace the 
one in the HP 82479A module, This hook provides more 
sophisticated system designs for error recovery. For exam- 
ple, if an HP 82402A Dual HP-IL Adapter is installed in 
the HP-71B, the recovery subprogram might notify a host 
computer connected to loop two that loop one is broken 
and out of service. 
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